{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d631c3f387a018b0eb8ade7192551a7ef6440b74df405f0cbc505b28e0426897"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96e62371399efb46f1869d04be17b25a9e582609b1aa9f934257ff578c4c4fb4"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb1e48058defdddc66eb83ac464cce312612aaf2aa69d4e891f05b3d1788525"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a45a6c9dc828a8cf7ce7740375ac8cba33ca0dff33aee398dc316c7e817fdf"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c467ce198cbca142325db7fca7d79ff736340485356ef63abd69673d8f7efe56"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa74b37e84d3b6b2b5fa016bc1b7cd817337807912ef8976fd6fbed98654a77"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0691b7db21dd5a71d47e304966dd96849a1919e2170500cb19e03b2334e62b23"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8bf06a625f171f6b544190e835fa695dde7213203be45583a7a2709298e8d5"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2158b5ff6f36aaf390bbe84aa738583ee0c7d967b7eaf27bc9b223d66a40989f"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a404c60ad93edfd196ebf5dba785ca578a0cd4372f6951a9fab7c3ed3b1d786"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d958ff77c8682d633d5deddd2307954abf2640905f899969ef6e4335802aa6b"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8d4984cb6a94dd3d1a81f5540f934082a2e70b223bf5d5d0dacf258c721a3c6"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe9d8fdb2dab0b610b664f52e00f9725abd62d9b1b53f809a14a4891ecc39230"}
{"level":"info","ts":"2026-07-23T16:34:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/767a03737cc138c030c1b82cf5cc1d6f8620e3999e004bcfc382b12617395e43"}
{"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"}
{"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a3d2b435f2794f11317ef76dfc0dba486e22450bc5c71d8ab0a964d9e1a1a4"}
{"level":"info","ts":"2026-07-23T16:34:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"}
{"level":"error","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"}
{"level":"debug","ts":"2026-07-23T16:35:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"error","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T16:35:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"error","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T16:35:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cfab210-34f4-442b-a870-91387bff2f7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":207909379},"http":{"id":"9cfab210-34f4-442b-a870-91387bff2f7d","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfab210-34f4-442b-a870-91387bff2f7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35894","PortSpecifier":{"PortValue":35894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35894","PortSpecifier":{"PortValue":35894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":261322100},"http":{"id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1e435f-c7e9-484a-bf15-b5b02428bd67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42546","PortSpecifier":{"PortValue":42546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"055dea52-3938-44ba-aa35-4b10fd0619a3","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42546","PortSpecifier":{"PortValue":42546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824515,"nanos":317051384},"http":{"id":"055dea52-3938-44ba-aa35-4b10fd0619a3","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055dea52-3938-44ba-aa35-4b10fd0619a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42556","PortSpecifier":{"PortValue":42556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42556","PortSpecifier":{"PortValue":42556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824516,"nanos":405786825},"http":{"id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbdb6eb-dc2a-430f-9e82-dfc3281ad969","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42560","PortSpecifier":{"PortValue":42560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87b3bea3-9667-4165-9292-b6534c30bad2","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42560","PortSpecifier":{"PortValue":42560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824517,"nanos":447736302},"http":{"id":"87b3bea3-9667-4165-9292-b6534c30bad2","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w8lwSGljsreJK8m9_VEfJTG0s4wRG6xfmPkjcxxEs14pzZ4SkXfqH8G56DSb\"}"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","subscription":"e2e-rate-iso-a-eb31f4","tenant":"e2e-shared-a-759481","userId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-eb31f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eb31f4"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7acf6e51-d56a-4182-bf57-3e6b1dd673b3","keyName":"e2e-rate-a-eb31f4","selected_subscription":"e2e-rate-iso-a-eb31f4","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-eb31f4@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eb31f4","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b3bea3-9667-4165-9292-b6534c30bad2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54632","PortSpecifier":{"PortValue":54632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":411730726},"http":{"id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b62ea5c3-9ed2-42b5-8135-4bb084fccb7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54602","PortSpecifier":{"PortValue":54602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27a2e6ec-4713-4a91-8304-65e08079c905","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54602","PortSpecifier":{"PortValue":54602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":451055931},"http":{"id":"27a2e6ec-4713-4a91-8304-65e08079c905","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"]}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/4a876ac063ef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c9934425-3fb5-46b6-b778-822a9e2c681b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f62a6f9a-0cab-4129-8029-306ad8c88a29","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27a2e6ec-4713-4a91-8304-65e08079c905","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54646","PortSpecifier":{"PortValue":54646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824528,"nanos":496908290},"http":{"id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd75b55-1edb-41b4-aba0-19688ad73ae5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50958","PortSpecifier":{"PortValue":50958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e5bd596-70dd-430b-9b91-dd8c69971662","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50958","PortSpecifier":{"PortValue":50958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824529,"nanos":544897443},"http":{"id":"5e5bd596-70dd-430b-9b91-dd8c69971662","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e5bd596-70dd-430b-9b91-dd8c69971662","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50970","PortSpecifier":{"PortValue":50970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","method":"POST","path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions","host":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50970","PortSpecifier":{"PortValue":50970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824530,"nanos":586633295},"http":{"id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","method":"POST","headers":{":authority":"e2e-shared-a-759481.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-759481/rate-test-model-759481/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OW8fNXYaKXJ3NVgn_oKIVzFBXJSs0nRWIOgVz4TvZBfvR8SdBe0wPRtIUUWO\"}"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","subscription":"e2e-rate-iso-a-a06b5d","tenant":"e2e-shared-a-759481","userId":"414f8b6a-6d23-45df-b91c-5a606dea09da","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\",\"requestedSubscription\":\"e2e-rate-iso-a-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-759481.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-759481/rate-test-model-759481\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-759481/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a06b5d"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"414f8b6a-6d23-45df-b91c-5a606dea09da","keyName":"e2e-rate-a-a06b5d","selected_subscription":"e2e-rate-iso-a-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-a-759481/e2e-rate-iso-a-a06b5d@ai-tenant-e2e-shared-a-759481/rate-test-model-759481","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-759481","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a06b5d","namespace":"ai-tenant-e2e-shared-a-759481","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-759481/rate-test-model-759481"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b6c817-1385-4d6d-95c3-a4a04e70afa0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","method":"POST","path":"/ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71/v1/completions","host":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784824530,"nanos":625973390},"http":{"id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","method":"POST","headers":{":authority":"e2e-shared-b-3a6a71.apps.485fc169-6051-489f-95d1-4a876ac063ef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KbViC28cgAbPfMxw_mzNCeDFoBbXtBFUYuugD7Vi4R6WIm50ol1KHxqAOA7J"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KbViC28cgAbPfMxw_mzNCeDFoBbXtBFUYuugD7Vi4R6WIm50ol1KHxqAOA7J\"}"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"324b3ca3-8022-4650-82ec-d1e692571399","keyName":"e2e-rate-b-a06b5d","subscription":"e2e-rate-iso-b-a06b5d","tenant":"e2e-shared-b-3a6a71","userId":"324b3ca3-8022-4650-82ec-d1e692571399","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\",\"requestedSubscription\":\"e2e-rate-iso-b-a06b5d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3a6a71.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3a6a71","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a06b5d","namespace":"ai-tenant-e2e-shared-b-3a6a71","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71"}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-3a6a71/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a06b5d"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"324b3ca3-8022-4650-82ec-d1e692571399","keyName":"e2e-rate-b-a06b5d","selected_subscription":"e2e-rate-iso-b-a06b5d","selected_subscription_key":"ai-tenant-e2e-shared-b-3a6a71/e2e-rate-iso-b-a06b5d@ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3a6a71","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a06b5d","namespace":"ai-tenant-e2e-shared-b-3a6a71","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-3a6a71/rate-test-model-3a6a71"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T16:35:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"029a1af1-2593-46bd-a4c3-6119a56d7fc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T16:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4377564e13b0b49a2757d647803a7fbe6ad5099a035909177fccfd763420e516"}
{"level":"info","ts":"2026-07-23T16:35:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b89f47a58b70417c4dad3697e5b59837351a1fba18700f6fd86f18a50d15b645"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb16fbeddaea16ef15c659e1416c58dfcc6fea0a68904c611744271d377274b9"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc6341735e37c9f868705906839a2ebe54b2de564432ae421e88f937529dcdd"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58e1e95ea30d4f83bc78a4a5cfeea6a18e3ede4094cffbdc9fdff9b3c7c55c2d"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51e97f878e07f8083ff494902b0853ad051513136ec60d7a11a21ae195e436c1"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/515cb74f11c9c0093967b2570d5c001d2dcab27fcac8643566bca91d2dd50231"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ebe8763b03fb6aa67cecf7565694e7cf2794a1d5cb2f91062b7b4c6412ff6c"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e032a6bbd952d8a0b12c8276d359dc2f0076f75d05002ae2b9387a46bf18f5ca"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f325a1a46ecdd8393221d4621816ad11a886f347b3fbf350d5ddd19326034f70"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adfff77baade1b602f50028500aa6fee7b4e9b44b39f8b6e9befda8a3b920398"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c5a4bff40a092b7c370d2fc0ad28476e5e40ec017299dbfddf21901596e024"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badab02a9cd6908e0f69afc5bae66c9e2d16793a10b68a459160bb2bc01f6835"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1093bb5d7be28835a9d123f35b1d150e38d2e69ab480f027f0a68b5eb1aa30cf"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/688e0f2f1631936f516d3b88aff09028ccba659e91bcf62ee15ac5f107626b64"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d47e158b7bdded73d7e1ad82f83b6e5d9e130ce21ad75067c4ad9772f8bac10"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2a1d82686d822db5a0f5fac845414fe6c9cf23f97441a3aa37185d50b410c72"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a398f698588d6d730057de992f6168eb932735bcf1fbe52a0eb08db0f4ae8a18"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69cdd5df5c91ec14856089fe7a888266d6e51a218f9786be69cc390f7f25a015"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a8616bcf31a698d4780fb9744cd53fac9bc6e8b05dfc4b606f7602e09ca51ed"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14e6da36aa291bbb1d193d8a2aef1b116c6035a6955bc31d4ca4df79b8ccd5f0"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/023c3af435cc008172e7c31cb51f1adb46a15d0faa9f19f538ebe4d32d622b2e"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee063449133f6c35a40d8ad6b8039aafd96cd35e4b1d2a56ee99fd8ee461ca63"}
{"level":"info","ts":"2026-07-23T16:35:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab2610337e54f8b4b56d31357187018b130bc23e654dbe4975078a55f66bc1a"}