--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"961429eb37c1e0b39f101b874012f09fab033e4173227f3ba0a66aa76069c077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4903e719112ea159d2acb96e535afbc896bee3ad9363b60b16538b56f64b8a94"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/961429eb37c1e0b39f101b874012f09fab033e4173227f3ba0a66aa76069c077"}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"error","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6"}
{"level":"error","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:47:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:47:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34124","PortSpecifier":{"PortValue":34124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34124","PortSpecifier":{"PortValue":34124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090876,"nanos":717303958},"http":{"id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcaba82c-7cb2-431a-958b-af1b6040ce41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37128","PortSpecifier":{"PortValue":37128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"831964a8-6952-47f2-9b1e-136545b7bc50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37128","PortSpecifier":{"PortValue":37128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090876,"nanos":783643255},"http":{"id":"831964a8-6952-47f2-9b1e-136545b7bc50","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"831964a8-6952-47f2-9b1e-136545b7bc50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34134","PortSpecifier":{"PortValue":34134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","method":"GET","path":"/maas-api/v1/api-keys/496e86da-f4dd-4110-a1fb-8d2af9c62daf","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34134","PortSpecifier":{"PortValue":34134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090876,"nanos":867517413},"http":{"id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","method":"GET","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/496e86da-f4dd-4110-a1fb-8d2af9c62daf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/496e86da-f4dd-4110-a1fb-8d2af9c62daf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c87cf10-3677-47ff-b0ad-a1e96d41f143","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37132","PortSpecifier":{"PortValue":37132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","method":"GET","path":"/maas-api/v1/api-keys/b2b7942b-1db8-4958-bece-fdcae40e9029","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37132","PortSpecifier":{"PortValue":37132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090876,"nanos":914810326},"http":{"id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","method":"GET","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b2b7942b-1db8-4958-bece-fdcae40e9029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b2b7942b-1db8-4958-bece-fdcae40e9029",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:47:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"784d15b0-6bef-4ffd-9ad4-bff9dc37833e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51702","PortSpecifier":{"PortValue":51702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51702","PortSpecifier":{"PortValue":51702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090896,"nanos":348996360},"http":{"id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e63d7373-2580-4a69-8b6b-4376d092ad5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56506","PortSpecifier":{"PortValue":56506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43659205-b1a1-419a-b121-9a06ad8dff3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56506","PortSpecifier":{"PortValue":56506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090896,"nanos":388771390},"http":{"id":"43659205-b1a1-419a-b121-9a06ad8dff3a","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43659205-b1a1-419a-b121-9a06ad8dff3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090896,"nanos":424413356},"http":{"id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","method":"GET","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18u3jVFTrgF9pFf3D_YnIZp0Vr0rDm6uCZ9hvTvCVxZQf2qrwUFpLu3JE4sUu"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18u3jVFTrgF9pFf3D_YnIZp0Vr0rDm6uCZ9hvTvCVxZQf2qrwUFpLu3JE4sUu\"}"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7841c9da-7a0b-4a80-be20-1c4b622f3483","keyName":"e2e-auth-iso-a-e6d7e3","subscription":"e2e-auth-iso-447b62","tenant":"e2e-shared-a-c2a8a9","userId":"7841c9da-7a0b-4a80-be20-1c4b622f3483","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-447b62"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d7b14f7-03ec-4c6b-9a10-8d2168f7b64b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56646","PortSpecifier":{"PortValue":56646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56646","PortSpecifier":{"PortValue":56646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090915,"nanos":861625671},"http":{"id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56932ecc-63f4-4f57-8f09-6ddbb38e3e7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e974a36-750e-44f6-8895-1ccf83256015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37540","PortSpecifier":{"PortValue":37540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e974a36-750e-44f6-8895-1ccf83256015","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e974a36-750e-44f6-8895-1ccf83256015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37540","PortSpecifier":{"PortValue":37540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090915,"nanos":922482458},"http":{"id":"4e974a36-750e-44f6-8895-1ccf83256015","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e974a36-750e-44f6-8895-1ccf83256015","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e974a36-750e-44f6-8895-1ccf83256015","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e974a36-750e-44f6-8895-1ccf83256015","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e974a36-750e-44f6-8895-1ccf83256015","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e974a36-750e-44f6-8895-1ccf83256015","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49018740-e140-407d-be7c-b8052bdc4709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37544","PortSpecifier":{"PortValue":37544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49018740-e140-407d-be7c-b8052bdc4709","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49018740-e140-407d-be7c-b8052bdc4709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:37544","PortSpecifier":{"PortValue":37544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090915,"nanos":979999138},"http":{"id":"49018740-e140-407d-be7c-b8052bdc4709","method":"GET","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49018740-e140-407d-be7c-b8052bdc4709","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AA1XbMTbw991taVC_hClmicGKabIilb3o5udOnZEJ7hje8sU0gkGB0hrAnCG"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49018740-e140-407d-be7c-b8052bdc4709","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AA1XbMTbw991taVC_hClmicGKabIilb3o5udOnZEJ7hje8sU0gkGB0hrAnCG\"}"}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49018740-e140-407d-be7c-b8052bdc4709","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49018740-e140-407d-be7c-b8052bdc4709","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49018740-e140-407d-be7c-b8052bdc4709","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"49018740-e140-407d-be7c-b8052bdc4709","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49018740-e140-407d-be7c-b8052bdc4709","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-15T04:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49018740-e140-407d-be7c-b8052bdc4709","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55882","PortSpecifier":{"PortValue":55882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55882","PortSpecifier":{"PortValue":55882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090933,"nanos":269984867},"http":{"id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbc2536f-d311-4b6e-b7c3-e77364c9637e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc277e25-301e-490e-8396-577288b90458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35974","PortSpecifier":{"PortValue":35974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc277e25-301e-490e-8396-577288b90458","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc277e25-301e-490e-8396-577288b90458","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35974","PortSpecifier":{"PortValue":35974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090933,"nanos":315792159},"http":{"id":"cc277e25-301e-490e-8396-577288b90458","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc277e25-301e-490e-8396-577288b90458","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc277e25-301e-490e-8396-577288b90458","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc277e25-301e-490e-8396-577288b90458","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc277e25-301e-490e-8396-577288b90458","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc277e25-301e-490e-8396-577288b90458","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55898","PortSpecifier":{"PortValue":55898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1422d40d-771b-459a-848d-a93232f3e7b1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55898","PortSpecifier":{"PortValue":55898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090933,"nanos":360743359},"http":{"id":"1422d40d-771b-459a-848d-a93232f3e7b1","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1422d40d-771b-459a-848d-a93232f3e7b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35980","PortSpecifier":{"PortValue":35980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:35980","PortSpecifier":{"PortValue":35980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090933,"nanos":399436304},"http":{"id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:48:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cfb4307-1c04-49d6-9dfc-ecdfc4a7e28a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf16558-f666-4779-82d3-d201f38ea745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36438","PortSpecifier":{"PortValue":36438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adf16558-f666-4779-82d3-d201f38ea745","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adf16558-f666-4779-82d3-d201f38ea745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36438","PortSpecifier":{"PortValue":36438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090948,"nanos":547746157},"http":{"id":"adf16558-f666-4779-82d3-d201f38ea745","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adf16558-f666-4779-82d3-d201f38ea745","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adf16558-f666-4779-82d3-d201f38ea745","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adf16558-f666-4779-82d3-d201f38ea745","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf16558-f666-4779-82d3-d201f38ea745","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adf16558-f666-4779-82d3-d201f38ea745","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48674","PortSpecifier":{"PortValue":48674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090948,"nanos":605434611},"http":{"id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fbe8aaa-1516-4bf2-a54f-06d533a6a5e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48684","PortSpecifier":{"PortValue":48684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"685758f5-39dd-43b3-861b-ba4efd4be094","method":"GET","path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48684","PortSpecifier":{"PortValue":48684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090948,"nanos":644641287},"http":{"id":"685758f5-39dd-43b3-861b-ba4efd4be094","method":"GET","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685758f5-39dd-43b3-861b-ba4efd4be094","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36444","PortSpecifier":{"PortValue":36444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","method":"GET","path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36444","PortSpecifier":{"PortValue":36444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090948,"nanos":676454421},"http":{"id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","method":"GET","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/044b724a-cd02-47b9-ae65-e2bc2620e815",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437e64dc-dd35-4459-a3d3-897a5425b9f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40210","PortSpecifier":{"PortValue":40210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090968,"nanos":87464510},"http":{"id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66bda1bc-0864-42b4-9ddc-d702a92503f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55174","PortSpecifier":{"PortValue":55174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:55174","PortSpecifier":{"PortValue":55174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090968,"nanos":122378930},"http":{"id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/auth-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b9cd4b6-9f74-4a32-abec-7bfd2c126b0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784090968,"nanos":165116105},"http":{"id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bPiqu1qH1NJzmlId_eW6BMrO2Yg47kuQFJVodw6HyQlZXsCH3dKG4s9GVuXD"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bPiqu1qH1NJzmlId_eW6BMrO2Yg47kuQFJVodw6HyQlZXsCH3dKG4s9GVuXD\"}"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7434795-fab7-4ad0-84f9-8f792132b17b","keyName":"e2e-auth-iso-a-49d48b","subscription":"e2e-auth-iso-81fc4d","tenant":"e2e-shared-a-c2a8a9","userId":"f7434795-fab7-4ad0-84f9-8f792132b17b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/auth-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-81fc4d"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:49:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd2c73b0-3f31-4004-b5af-75967c15fcdd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4903e719112ea159d2acb96e535afbc896bee3ad9363b60b16538b56f64b8a94"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24d67b0892c31a2a02677956ae09718d7f60d108f284f3ca2e59e4f1b61b4bc0"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13f325e3e4a26987c141ed74c76ba7d9294d14f54c822dd0c6dd9d1ae1eaa772"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd1682c46bfef0a485ce789b22ff1861eac0fe99ab4a19e5afb78fd2ea6fe1ac"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a809a94e2f24b524749eb09f9616da94167f232ad82d4f3291977be73c6f4b"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c696db1c1c8480fa315040fe6c2d077a98f68eb40264468fdb5a4c588835a12"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08bc3fb2295b200a90bf675a77b72cb49c084dd97350e40fa6dda541930c5d11"}
{"level":"info","ts":"2026-07-15T04:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/961429eb37c1e0b39f101b874012f09fab033e4173227f3ba0a66aa76069c077"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"info","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0feb3937c07ebfbaf57cfe05e79dfab79e387a7971a5cd7b3d6b51e64b2bcc01"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:49:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f88d457a69bf4b535ec6d54dd9f66ae3e005b6032c1d122b9f88cbba5da26e6"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80aacde41b67010ce223e5e5ddf4903857a67e04f6b02e6a1bc1653c0de460be"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22347ae236a2b7792010349a6e6f234a67d6bbbe0cda5e5d24ce0116f828bf69"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94706da30b515bbd90f660e37a2300c79dfe7b9996dfabd395c855a308070630"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0753dca24e911d6b66391c535d155e4bd782747724cf7d550a503b84623e1aa"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cd75364b3e22f7c4665588c7e6283d33f72c8f0019b98b7803cf8e1319a4a56"}
{"level":"info","ts":"2026-07-15T04:49:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79256ae366c2243514a86621055d2d3a3a05a5a6edbbf786ec16b6de3079cbff"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4"}
{"level":"info","ts":"2026-07-15T04:50:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"}
{"level":"info","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"debug","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f"}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11"}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"}
{"level":"debug","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40212","PortSpecifier":{"PortValue":40212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40212","PortSpecifier":{"PortValue":40212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091036,"nanos":99098829},"http":{"id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/sub-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ecc9408-efb0-4b6d-8b9d-3a2af1dc35d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa82edeb-3615-4e62-9280-4f473f7158ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56228","PortSpecifier":{"PortValue":56228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091036,"nanos":139555882},"http":{"id":"aa82edeb-3615-4e62-9280-4f473f7158ef","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/sub-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa82edeb-3615-4e62-9280-4f473f7158ef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40220","PortSpecifier":{"PortValue":40220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091036,"nanos":180938466},"http":{"id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","method":"GET","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HOLp0pQ3bQU7yl0W_DCFl9vzerAkZkccVftH2m21GuuLpoZGQ6skm7LJRHjU"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HOLp0pQ3bQU7yl0W_DCFl9vzerAkZkccVftH2m21GuuLpoZGQ6skm7LJRHjU\"}"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"51f4f60f-23a2-4192-a730-c1bfd8411db7","keyName":"e2e-sub-iso-48cd60","subscription":"e2e-a-only-613ee5","tenant":"e2e-shared-a-c2a8a9","userId":"51f4f60f-23a2-4192-a730-c1bfd8411db7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/sub-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-613ee5"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbd9200d-78ea-4f22-a9fc-a1d7245b4167","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:56234","PortSpecifier":{"PortValue":56234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091036,"nanos":229634836},"http":{"id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","method":"GET","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qiVKqSkbW8bITME5_LDTnqs9cRrTUdJos6kySzAfqWrlcxYPqxgPAtyhMRhs"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qiVKqSkbW8bITME5_LDTnqs9cRrTUdJos6kySzAfqWrlcxYPqxgPAtyhMRhs\"}"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"125267d6-9ba3-4cde-a301-2e5d659b8aa0","keyName":"e2e-sub-iso-b74b3c","subscription":"e2e-b-only-613ee5","tenant":"e2e-shared-b-3a7aa4","userId":"125267d6-9ba3-4cde-a301-2e5d659b8aa0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/sub-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-613ee5"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27dcafba-83cf-48ab-ad9a-1b6715adc16c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45110","PortSpecifier":{"PortValue":45110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45110","PortSpecifier":{"PortValue":45110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091046,"nanos":381215067},"http":{"id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/sub-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5230a3b-05aa-4759-9d3c-8c085c948a55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39672","PortSpecifier":{"PortValue":39672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f5cda08-ab31-4e25-94af-e68f382fd155","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39672","PortSpecifier":{"PortValue":39672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091046,"nanos":420822046},"http":{"id":"8f5cda08-ab31-4e25-94af-e68f382fd155","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/sub-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5cda08-ab31-4e25-94af-e68f382fd155","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45114","PortSpecifier":{"PortValue":45114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091046,"nanos":463839063},"http":{"id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YHLVA93k4TE66INY_8RKmY2CmBHvcMrXf4fgdrNBijT47fjlTTAWHrvqWI8y"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YHLVA93k4TE66INY_8RKmY2CmBHvcMrXf4fgdrNBijT47fjlTTAWHrvqWI8y\"}"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7115ba1c-18e8-4899-adc9-e734bdbd6916","keyName":"e2e-sub-iso-c88056","subscription":"e2e-shared-sub-5e540c","tenant":"e2e-shared-a-c2a8a9","userId":"7115ba1c-18e8-4899-adc9-e734bdbd6916","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/sub-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5e540c"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a91bfbf-f9fa-4168-9746-49589ca175a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39688","PortSpecifier":{"PortValue":39688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67551596-e7f5-4ede-90c3-dbced7cfa638","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39688","PortSpecifier":{"PortValue":39688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091046,"nanos":495869313},"http":{"id":"67551596-e7f5-4ede-90c3-dbced7cfa638","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vmdVzIDLHZ1onrnx_pyBDcWqMPjOLfK36g4splou1zk6LPhTuZ44XLppE1yQ"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vmdVzIDLHZ1onrnx_pyBDcWqMPjOLfK36g4splou1zk6LPhTuZ44XLppE1yQ\"}"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3517b9b7-8b6c-4daf-bdb4-95c91df6c3dc","keyName":"e2e-sub-iso-ccd066","subscription":"e2e-shared-sub-5e540c","tenant":"e2e-shared-b-3a7aa4","userId":"3517b9b7-8b6c-4daf-bdb4-95c91df6c3dc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/sub-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-5e540c"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:50:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67551596-e7f5-4ede-90c3-dbced7cfa638","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f09b7ffd35757dd1c843f0945720d16a65adef894ffd50f4740794c3192e710c"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32ac4aa2809efcae68980e65e29e6d6e2919b69abb0412b40786e789364e4e11"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4670a9dd3ae66147c2b3559f754f9fd515b644d0a47ba7fafd4a0bb06d4b10e4"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c38dda19c31e735f1cd6090cce34fab142fd8f80d4150996967a0b3ecb497203"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c1b1adbd0033bf37c93a9826728cf53259c1cca1504bb688a2842fa061931f"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e40630dd9395075a97f79094b9d8fb5fb1d35170f7a81888092848a3e6f0744a"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f50cdd4e121dcb48c0e5eaf3df723b07f773994f9458224154d38ac15482e3bf"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a1839e1e0e9ed7831914c7ee65ecf6dbed40d53779b529514c73c55b8f897c"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc4f6c28540b5e30a333b9990aaa7481b94c9e85a20171d1ad656536447b69fd"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c730cb72c11b945081625f6369dc95039e9c1fbf1b363a7be22ad733925c2b15"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a05a609085a2adfc5adce1e9ab6a66df662a76f8a5b79259b7a7f4bc91797d5d"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a273cd0a40b7e90ca44cb332bf2ddc2ec791ba9e6f93498d52d6553a9aecb89f"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65f0bd043f22282c6f408227f25d4f72fc4925a667cf81861c5c1bc2aeb5f68b"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3ca79f69e9d8cf6fc27489a78fe31332f235578912f2febbc37b9e737b9d6c1"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5e58c351d97919374be4dce769a5c68a44206eda7f8d30d4ff52490d9140ef1"}
{"level":"info","ts":"2026-07-15T04:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7213442334713f6f51be0b2816d84e273e50538f1c58ed2950dd4e0e7ac8d2c"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"}
{"level":"error","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"error","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"debug","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T04:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T04:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"}
{"level":"debug","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf"}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"info","ts":"2026-07-15T04:51:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"info","ts":"2026-07-15T04:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48284","PortSpecifier":{"PortValue":48284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ce36de-5a36-45c1-b264-075bad0a8f68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48284","PortSpecifier":{"PortValue":48284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091099,"nanos":991164933},"http":{"id":"42ce36de-5a36-45c1-b264-075bad0a8f68","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:51:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:51:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ce36de-5a36-45c1-b264-075bad0a8f68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47726","PortSpecifier":{"PortValue":47726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091100,"nanos":33669033},"http":{"id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7a4ae72-0d61-45e6-8a39-360b9f06c352","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48300","PortSpecifier":{"PortValue":48300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48300","PortSpecifier":{"PortValue":48300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091100,"nanos":73784262},"http":{"id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d891e12b-b810-48dc-bc00-ec38f1e2160b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48310","PortSpecifier":{"PortValue":48310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091101,"nanos":151380678},"http":{"id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b0792fb-7b14-4431-874e-6f5d8ed02a49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48316","PortSpecifier":{"PortValue":48316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48316","PortSpecifier":{"PortValue":48316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091102,"nanos":189889071},"http":{"id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b955b4d-8d3b-4aa5-a593-d810c5bb4a0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091103,"nanos":242812851},"http":{"id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2184e64c-99e2-4dc9-92f3-2e982ddd1f6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48334","PortSpecifier":{"PortValue":48334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8d5625f-6bc6-414d-85ae-bff21449b956","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48334","PortSpecifier":{"PortValue":48334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091104,"nanos":282249595},"http":{"id":"a8d5625f-6bc6-414d-85ae-bff21449b956","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d5625f-6bc6-414d-85ae-bff21449b956","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fca11a8-70c4-4656-a347-e59a428c14f6","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45336","PortSpecifier":{"PortValue":45336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091105,"nanos":331871196},"http":{"id":"3fca11a8-70c4-4656-a347-e59a428c14f6","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fca11a8-70c4-4656-a347-e59a428c14f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45340","PortSpecifier":{"PortValue":45340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dde8877-ef3e-4380-9531-9709a75fae62","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45340","PortSpecifier":{"PortValue":45340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091106,"nanos":372073397},"http":{"id":"3dde8877-ef3e-4380-9531-9709a75fae62","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dde8877-ef3e-4380-9531-9709a75fae62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ceb644a-f243-41ee-ae52-085a11468378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45346","PortSpecifier":{"PortValue":45346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ceb644a-f243-41ee-ae52-085a11468378","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ceb644a-f243-41ee-ae52-085a11468378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45346","PortSpecifier":{"PortValue":45346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091107,"nanos":414054476},"http":{"id":"4ceb644a-f243-41ee-ae52-085a11468378","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ceb644a-f243-41ee-ae52-085a11468378","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ceb644a-f243-41ee-ae52-085a11468378","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ceb644a-f243-41ee-ae52-085a11468378","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ceb644a-f243-41ee-ae52-085a11468378","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45350","PortSpecifier":{"PortValue":45350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45350","PortSpecifier":{"PortValue":45350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091108,"nanos":475719447},"http":{"id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5afc331c-e8b9-4b7b-a005-6486bb56d0cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45352","PortSpecifier":{"PortValue":45352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45352","PortSpecifier":{"PortValue":45352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091109,"nanos":517638330},"http":{"id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"437b28eb-9474-4e1a-b3b7-126d8d51760a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45368","PortSpecifier":{"PortValue":45368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"890b6e23-80a2-4db6-a09b-09c677108c74","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:45368","PortSpecifier":{"PortValue":45368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091110,"nanos":558681006},"http":{"id":"890b6e23-80a2-4db6-a09b-09c677108c74","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6j4SKIscspHZJ0h2_jCvzREqN3z8emWB9UqZtyBprceuZuoCWw4OlqgFcRFV\"}"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","subscription":"e2e-rate-iso-a-cfaa68","tenant":"e2e-shared-a-c2a8a9","userId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-cfaa68\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cfaa68"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bac14c3-6279-40ec-bdf9-ce7e8aaeaaf0","keyName":"e2e-rate-a-cfaa68","selected_subscription":"e2e-rate-iso-a-cfaa68","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-cfaa68@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cfaa68","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"890b6e23-80a2-4db6-a09b-09c677108c74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57492","PortSpecifier":{"PortValue":57492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57492","PortSpecifier":{"PortValue":57492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091119,"nanos":442783155},"http":{"id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0b9c118-71ff-4e3e-b4c2-54bec7f23359","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59144","PortSpecifier":{"PortValue":59144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59144","PortSpecifier":{"PortValue":59144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091119,"nanos":483979333},"http":{"id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"]}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbb2be5188e7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b155d304-ef3d-4766-832d-258d3a5d1aa6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d6887e37-f9b9-4ae6-9d3d-7ad0f2cd5bd5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0c2ab77-a21c-4a2a-8c53-5b2ea016eed3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57502","PortSpecifier":{"PortValue":57502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55107df3-dea2-46c2-8d34-61c3f88461df","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57502","PortSpecifier":{"PortValue":57502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091119,"nanos":519691280},"http":{"id":"55107df3-dea2-46c2-8d34-61c3f88461df","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55107df3-dea2-46c2-8d34-61c3f88461df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57510","PortSpecifier":{"PortValue":57510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57510","PortSpecifier":{"PortValue":57510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091120,"nanos":583953825},"http":{"id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0f2a46-a953-435d-a1e7-57d33f57374e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57522","PortSpecifier":{"PortValue":57522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57522","PortSpecifier":{"PortValue":57522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091121,"nanos":626088123},"http":{"id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed0a4f44-1925-431e-918f-94b5fe1d6ab5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091122,"nanos":664562073},"http":{"id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48930d15-f1a8-4bcf-a716-f85b0a1e03bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57540","PortSpecifier":{"PortValue":57540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:57540","PortSpecifier":{"PortValue":57540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091123,"nanos":705070348},"http":{"id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bfd3e47-b82e-48fa-a5b9-99f5aea81e2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48470","PortSpecifier":{"PortValue":48470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48470","PortSpecifier":{"PortValue":48470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091124,"nanos":745191591},"http":{"id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d632aa45-fbae-4ee4-b16a-37e22b7abb82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48486","PortSpecifier":{"PortValue":48486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48486","PortSpecifier":{"PortValue":48486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091125,"nanos":791759925},"http":{"id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e170be37-2ae0-46c4-9467-cdbdf7a3fb66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48502","PortSpecifier":{"PortValue":48502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a658af05-9abf-4607-ab8f-6aef28dece4b","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48502","PortSpecifier":{"PortValue":48502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091126,"nanos":831133014},"http":{"id":"a658af05-9abf-4607-ab8f-6aef28dece4b","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a658af05-9abf-4607-ab8f-6aef28dece4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091127,"nanos":875556749},"http":{"id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7793bfa6-ad69-4961-b1a2-5bb915c01661","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48510","PortSpecifier":{"PortValue":48510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df67a746-0280-4ad3-a220-b3b4d34607be","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48510","PortSpecifier":{"PortValue":48510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091128,"nanos":913874701},"http":{"id":"df67a746-0280-4ad3-a220-b3b4d34607be","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df67a746-0280-4ad3-a220-b3b4d34607be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48512","PortSpecifier":{"PortValue":48512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","method":"POST","path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions","host":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48512","PortSpecifier":{"PortValue":48512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091129,"nanos":953825076},"http":{"id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","method":"POST","headers":{":authority":"e2e-shared-a-c2a8a9.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bYmLh3yZUwW4rXRL_E1iQmNmHce82bAY4fuVHs3pfXNes33XbdAJAeHC8M9Q\"}"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","subscription":"e2e-rate-iso-a-d0001e","tenant":"e2e-shared-a-c2a8a9","userId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\",\"requestedSubscription\":\"e2e-rate-iso-a-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c2a8a9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c2a8a9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6341ae08-d29f-48df-b70b-536ae0f5fc64","keyName":"e2e-rate-a-d0001e","selected_subscription":"e2e-rate-iso-a-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-a-c2a8a9/e2e-rate-iso-a-d0001e@ai-tenant-e2e-shared-a-c2a8a9/rate-test-model-c2a8a9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c2a8a9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d0001e","namespace":"ai-tenant-e2e-shared-a-c2a8a9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e65e30c6-58fc-4560-97c3-1a3f4847ec12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","method":"POST","path":"/ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4/v1/completions","host":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784091129,"nanos":996885213},"http":{"id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","method":"POST","headers":{":authority":"e2e-shared-b-3a7aa4.apps.159a7fb2-2e74-4b28-bbe4-bbb2be5188e7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dT3NXWDRpkKZmXF6_L2KCovzWRDTV6GJi2YnB799NzycTcVxuWkTQIGkGisZ"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dT3NXWDRpkKZmXF6_L2KCovzWRDTV6GJi2YnB799NzycTcVxuWkTQIGkGisZ\"}"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aca14643-2861-4c50-8f9b-23c59b5d71a2","keyName":"e2e-rate-b-d0001e","subscription":"e2e-rate-iso-b-d0001e","tenant":"e2e-shared-b-3a7aa4","userId":"aca14643-2861-4c50-8f9b-23c59b5d71a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4\",\"requestedSubscription\":\"e2e-rate-iso-b-d0001e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a7aa4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3a7aa4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d0001e","namespace":"ai-tenant-e2e-shared-b-3a7aa4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a7aa4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d0001e"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aca14643-2861-4c50-8f9b-23c59b5d71a2","keyName":"e2e-rate-b-d0001e","selected_subscription":"e2e-rate-iso-b-d0001e","selected_subscription_key":"ai-tenant-e2e-shared-b-3a7aa4/e2e-rate-iso-b-d0001e@ai-tenant-e2e-shared-b-3a7aa4/rate-test-model-3a7aa4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3a7aa4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d0001e","namespace":"ai-tenant-e2e-shared-b-3a7aa4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T04:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc35d9ed-ba73-4052-b4c0-8db4687d9564","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T04:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36dfd55f63f7964b7fca95902e8c8d1ef265a384e88681f89f054cd2bffa9a2f"}
{"level":"info","ts":"2026-07-15T04:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d511dfe5b521abe96e4fd29dbe48612b5d109571f0571702a073a47693625ea"}
{"level":"info","ts":"2026-07-15T04:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a93aefdb548469ba1ee6eddf76d559d20f6dac59882ae75fc49bacac124ef51"}
{"level":"info","ts":"2026-07-15T04:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/633d4e6e00a884b560706f4020780bbb03fb809264647319093d5bbebd59add3"}
{"level":"info","ts":"2026-07-15T04:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ded28fdb030bf81ce6005d6eb2b4a808141d8f8ebb0a185ffcb849a94b91fd78"}
{"level":"info","ts":"2026-07-15T04:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef6407b1da74b7dbd258d0a6750f1d33e21fb49143da25fe1642b84cae69af7e"}
{"level":"info","ts":"2026-07-15T04:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f66f13df76aa2f3615522b4594d2b2b9cf62c6171a1358f0c8bac2d75ce655ed"}
{"level":"info","ts":"2026-07-15T04:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efbff885a221e0972601e78bc455ffa5cabd677b0ace018e980092a752352478"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7688f4cab27091396c3f3ec577c3e125c00fd77c8c0c9be8b359eb4759ad9faf"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a1c1d723ac0502f08dec2475f516045344b4bf2415f20b849715f0303567534"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d74d84b57a9d980af7430639108229cc06cf609da8861fa8202b151dada2de9b"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41649b75fc77154f46eac1fece1451e8891f98fea160b152e8916f6ea3d23d6"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42df3832ff2cf9a6b65a5abda7bc80a7b248241be73a6eb490528db62c76f1b6"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52c6cedbb1bbe3c91f40330f8252031b83cad015d270d7f9cd590ca32a8c408"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20515aa571c3b5296bad3ea38151ffe880f23ec970b292b44bd05c19e1e85a93"}
{"level":"info","ts":"2026-07-15T04:52:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a818dfb69301e0fe306e455c242ad8acc61d4ded801579a70f7ccd129a721c"}
{"level":"info","ts":"2026-07-15T04:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a408c9e8602b084ad1f8daeb7627450de260ac6c4eb4c90b490729e679fc9feb"}
{"level":"info","ts":"2026-07-15T04:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0afc5da45128766c4038aa5682ad9870bf03d0f5caa0d758bb59e4738318b3c7"}
{"level":"info","ts":"2026-07-15T04:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7981932a7a6588725adebab8d8b6bf344e3f4f218b17d37e1ea0fd74baba12b9"}
{"level":"info","ts":"2026-07-15T04:52:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3561958bc0ed53fb027143dca52172c7c5893ca4e75c53c4119c20ba931899e1"}
{"level":"info","ts":"2026-07-15T04:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb9e40a1c18b223b4ce520b2ff7ac76230da129345b725ae5a71cc2a72d63201"}
{"level":"info","ts":"2026-07-15T04:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2349230d01ae96e7f8b05e1672fd23c8b0ed801e8e67804ab666b2dbc0c9395"}
{"level":"info","ts":"2026-07-15T04:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0814b039ac7d9ace87b18b09e2557a665c8d18fd7f57300a73495e4b6629191b"}
{"level":"info","ts":"2026-07-15T04:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bfc56d34173cc75a7911726187276cc3e12bd446b24dadd98daeec13166ab09"}