{"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58bb08a15d344504f0d199d7ab80fc0f5b16d88ba2758a59388a393b6bac8391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/144e68ceef5313bb82fa5a1bb9f40ec1853cf5007304b5e7e6db7e982aae20c4"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"144e68ceef5313bb82fa5a1bb9f40ec1853cf5007304b5e7e6db7e982aae20c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781f62e28af73ccf30eb4750117305a878d164bbd213d2d95aebce561d50a66a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69651a29dadc1d5a3b59c09c6f0b2585834a457999dca4ce8a613b03fbc40141"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781f62e28af73ccf30eb4750117305a878d164bbd213d2d95aebce561d50a66a"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58bb08a15d344504f0d199d7ab80fc0f5b16d88ba2758a59388a393b6bac8391"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:42:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d"} {"level":"error","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"} {"level":"info","ts":"2026-07-28T13:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d"} {"level":"info","ts":"2026-07-28T13:43:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45510","PortSpecifier":{"PortValue":45510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d62b5328-ced7-4257-87b9-292b8010a96a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45510","PortSpecifier":{"PortValue":45510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246186,"nanos":990534664},"http":{"id":"d62b5328-ced7-4257-87b9-292b8010a96a","method":"POST","headers":{":authority":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T13:43:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1028fc9-7223-427a-a400-774fdc5d17db","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"]}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1028fc9-7223-427a-a400-774fdc5d17db","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d62b5328-ced7-4257-87b9-292b8010a96a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8fd168.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51566","PortSpecifier":{"PortValue":51566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246187,"nanos":43029662},"http":{"id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","method":"POST","headers":{":authority":"e2e-shared-b-8fd168.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1028fc9-7223-427a-a400-774fdc5d17db","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"]}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1028fc9-7223-427a-a400-774fdc5d17db","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"58bb08a15d344504f0d199d7ab80fc0f5b16d88ba2758a59388a393b6bac8391"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8fd168.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8fd168/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e92594-a9e6-4d87-a9f6-4778a2b93bc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45516","PortSpecifier":{"PortValue":45516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","method":"POST","path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions","host":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45516","PortSpecifier":{"PortValue":45516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246187,"nanos":89205301},"http":{"id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","method":"POST","headers":{":authority":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM\"}"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","subscription":"e2e-rate-iso-a-db0835","tenant":"e2e-shared-a-2c9e23","userId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\",\"requestedSubscription\":\"e2e-rate-iso-a-db0835\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db0835"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","selected_subscription":"e2e-rate-iso-a-db0835","selected_subscription_key":"ai-tenant-e2e-shared-a-2c9e23/e2e-rate-iso-a-db0835@ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2925cb3a-0c4f-4f7b-a20c-b907f44b80a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45530","PortSpecifier":{"PortValue":45530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d23a61c6-82f3-4e32-a434-f772ce18400b","method":"POST","path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions","host":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45530","PortSpecifier":{"PortValue":45530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246188,"nanos":142854598},"http":{"id":"d23a61c6-82f3-4e32-a434-f772ce18400b","method":"POST","headers":{":authority":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM\"}"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","subscription":"e2e-rate-iso-a-db0835","tenant":"e2e-shared-a-2c9e23","userId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\",\"requestedSubscription\":\"e2e-rate-iso-a-db0835\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db0835"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","selected_subscription":"e2e-rate-iso-a-db0835","selected_subscription_key":"ai-tenant-e2e-shared-a-2c9e23/e2e-rate-iso-a-db0835@ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23a61c6-82f3-4e32-a434-f772ce18400b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45532","PortSpecifier":{"PortValue":45532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","method":"POST","path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions","host":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45532","PortSpecifier":{"PortValue":45532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246189,"nanos":181665141},"http":{"id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","method":"POST","headers":{":authority":"e2e-shared-a-2c9e23.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XZLnRYuHuuwoQr7t_gvUSaJIMNadxTQHKghzsnlGJWXgFnDOxbGCdqpr5LoM\"}"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","subscription":"e2e-rate-iso-a-db0835","tenant":"e2e-shared-a-2c9e23","userId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\",\"requestedSubscription\":\"e2e-rate-iso-a-db0835\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c9e23.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db0835"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"11295608-ed21-4a1e-b3c0-e7c9507c17ac","keyName":"e2e-rate-a-db0835","selected_subscription":"e2e-rate-iso-a-db0835","selected_subscription_key":"ai-tenant-e2e-shared-a-2c9e23/e2e-rate-iso-a-db0835@ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2c9e23/models/facebook/opt-125m","name":"rate-test-model-2c9e23","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db0835","namespace":"ai-tenant-e2e-shared-a-2c9e23","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2c9e23/rate-test-model-2c9e23"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b108fc85-5f79-4402-a4c4-fb45bfdb7ea2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51580","PortSpecifier":{"PortValue":51580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8597e843-cf7d-4463-8814-0d01b69c524c","method":"POST","path":"/ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168/v1/completions","host":"e2e-shared-b-8fd168.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51580","PortSpecifier":{"PortValue":51580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246189,"nanos":223928006},"http":{"id":"8597e843-cf7d-4463-8814-0d01b69c524c","method":"POST","headers":{":authority":"e2e-shared-b-8fd168.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TldrB3pd7BjPahyt_eIQPppS52XA15LzafMyAnnZ8fCd9UMsyGgbEvECgDKl"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8fd168.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TldrB3pd7BjPahyt_eIQPppS52XA15LzafMyAnnZ8fCd9UMsyGgbEvECgDKl\"}"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8fd168.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b5807b8e-8cc3-4b6d-95d8-63df2fb702a0","keyName":"e2e-rate-b-db0835","subscription":"e2e-rate-iso-b-db0835","tenant":"e2e-shared-b-8fd168","userId":"b5807b8e-8cc3-4b6d-95d8-63df2fb702a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8fd168.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168\",\"requestedSubscription\":\"e2e-rate-iso-b-db0835\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8fd168.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-8fd168/models/facebook/opt-125m","name":"rate-test-model-8fd168","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-db0835","namespace":"ai-tenant-e2e-shared-b-8fd168","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168"}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8fd168/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-db0835"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b5807b8e-8cc3-4b6d-95d8-63df2fb702a0","keyName":"e2e-rate-b-db0835","selected_subscription":"e2e-rate-iso-b-db0835","selected_subscription_key":"ai-tenant-e2e-shared-b-8fd168/e2e-rate-iso-b-db0835@ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-8fd168/models/facebook/opt-125m","name":"rate-test-model-8fd168","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-db0835","namespace":"ai-tenant-e2e-shared-b-8fd168","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8fd168/rate-test-model-8fd168"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:43:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8597e843-cf7d-4463-8814-0d01b69c524c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cce5b8b46a30acdef1d43d885357d37d89f9ced4fe66076749abd90fa21b378d"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d55e194d13ee25599d14726bc23c38b161226cac0874e1ac585c9690533c32"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58bb08a15d344504f0d199d7ab80fc0f5b16d88ba2758a59388a393b6bac8391"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e08db4b75e9d2a7d0f907c277508420002cf9045f634ed35e33d5ba976baa05"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d541a5bcc85e6bc9758340cd4c0d73ac138cbf9776aad0e719b7e8a1746193c3"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5dec96ccee51d72f3eda85f28bf2310a26821ca93e2e2ebaa7030b667ce60b"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78e731d57e628a18319efa5eed6ff8cd418169113acb4d172547251f5dfb2899"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1021e634f1e7aecf74a3f36af270cf20c8ac39f4987bbd256df3b49425c0eda8"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d9d18512c2257c65a560c7952584cf028cbc2ee035295aae254f2c81fba80a5"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f10e03bc4d27ae5c013c147fce88593fdc32247b17b74a873f170078bf9a99f"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677183510f823340b66265d2f44911337930191dcdcd6bc4f4a7cc8c6a9ce62f"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781f62e28af73ccf30eb4750117305a878d164bbd213d2d95aebce561d50a66a"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66c7b1e5b6df8e247a434a2df45c00753720e31beec15767a9344b5cb008c239"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46d96317541051fb3671317449e0f76df4f7433c66af4fdffe35a7287f7b4113"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1b99fd2f3f636261a82ee3e3f11b731fa3c5e576c6cf485d97b29c3518dfc7"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efed0aef1e3f04a6a624ec2801df3561dcbb81fa3e422a2bbfb0f4a62ab39ccb"} {"level":"info","ts":"2026-07-28T13:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ee4110f3b1ebdff881cbf5caa0b25fa7c2561d1e20f2d79b4f863b8c637cc4f"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a2923c173de6f7b3ec31e6c311bea01f3524544ef2f60d43927f8f5c040e657"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b16d74429a130890fc71a8f1ce6e4707dd1f325e976d3da2b138f8689506b1"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac52201fd0a304dde67bdd7a7d66ad8192c105778ec8cf423ffc543982d99a9d"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69651a29dadc1d5a3b59c09c6f0b2585834a457999dca4ce8a613b03fbc40141"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/144e68ceef5313bb82fa5a1bb9f40ec1853cf5007304b5e7e6db7e982aae20c4"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/673b2135a691d7657112e1726bffcea72425db9455c65ff58cc78d3bc1a5375d"} {"level":"info","ts":"2026-07-28T13:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1554afff930b43443f0e2bc4df1f7ceaad6dc48b968673e230b744e778d510ce"} {"level":"info","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49092","PortSpecifier":{"PortValue":49092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49092","PortSpecifier":{"PortValue":49092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246272,"nanos":69890367},"http":{"id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","method":"POST","headers":{":authority":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1028fc9-7223-427a-a400-774fdc5d17db","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"]}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1028fc9-7223-427a-a400-774fdc5d17db","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"133456cb-8bbf-47f8-bf0c-af819dd2140c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4690f935-4591-4426-b91c-f6b1c792b5c3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246272,"nanos":124707276},"http":{"id":"4690f935-4591-4426-b91c-f6b1c792b5c3","method":"POST","headers":{":authority":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-N8jOzdOXTk5A5XHF_oJ75faqG6z2wALMgUGtL3VIGqDr3mv3l2DKAnhJ1boL"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-N8jOzdOXTk5A5XHF_oJ75faqG6z2wALMgUGtL3VIGqDr3mv3l2DKAnhJ1boL\"}"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9acdb6f6-0e6b-4ad9-8de7-7921b0f6be64","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"9acdb6f6-0e6b-4ad9-8de7-7921b0f6be64","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9acdb6f6-0e6b-4ad9-8de7-7921b0f6be64","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:44:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4690f935-4591-4426-b91c-f6b1c792b5c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"error","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"} {"level":"error","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"debug","ts":"2026-07-28T13:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T13:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-28T13:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c"} {"level":"info","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171808f6-f464-404d-9a7a-122620fb80ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"171808f6-f464-404d-9a7a-122620fb80ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-15d223.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171808f6-f464-404d-9a7a-122620fb80ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36236","PortSpecifier":{"PortValue":36236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246342,"nanos":847245571},"http":{"id":"171808f6-f464-404d-9a7a-122620fb80ae","method":"POST","headers":{":authority":"e2e-ipp-a-15d223.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"171808f6-f464-404d-9a7a-122620fb80ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c1028fc9-7223-427a-a400-774fdc5d17db","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"]}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"171808f6-f464-404d-9a7a-122620fb80ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9fc917f1b1c1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=685cee28-9059-4855-9d24-6fffea23d0af"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c1028fc9-7223-427a-a400-774fdc5d17db","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-15d223.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-15d223/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171808f6-f464-404d-9a7a-122620fb80ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171808f6-f464-404d-9a7a-122620fb80ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171808f6-f464-404d-9a7a-122620fb80ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36240","PortSpecifier":{"PortValue":36240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","method":"POST","path":"/ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223/v1/chat/completions","host":"e2e-ipp-a-15d223.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36240","PortSpecifier":{"PortValue":36240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785246344,"nanos":911777168},"http":{"id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","method":"POST","headers":{":authority":"e2e-ipp-a-15d223.apps.dd1187d8-10d1-4921-b8bc-9fc917f1b1c1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LX2yVwcAamDmhFOT_7WW0w4GSa95b3W3DOjNwJWSTJPTrvCzKl3jzZ1GoQFN"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-15d223.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LX2yVwcAamDmhFOT_7WW0w4GSa95b3W3DOjNwJWSTJPTrvCzKl3jzZ1GoQFN\"}"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-15d223.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28e7a57e-efa1-4cb7-a6e6-b36818f73e95","keyName":"e2e-ipp-15d223","subscription":"ipp-route-15d223-sub","tenant":"e2e-ipp-a-15d223","userId":"28e7a57e-efa1-4cb7-a6e6-b36818f73e95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-15d223.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223\",\"requestedSubscription\":\"ipp-route-15d223-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-15d223.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-15d223/models/facebook/opt-125m","name":"ipp-route-15d223","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-15d223-sub","namespace":"ai-tenant-e2e-ipp-a-15d223","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223"}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-15d223/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-15d223-sub"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"28e7a57e-efa1-4cb7-a6e6-b36818f73e95","keyName":"e2e-ipp-15d223","selected_subscription":"ipp-route-15d223-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223-sub@ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-15d223/models/facebook/opt-125m","name":"ipp-route-15d223","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-15d223-sub","namespace":"ai-tenant-e2e-ipp-a-15d223","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-15d223/ipp-route-15d223"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-28T13:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b59b8d-edcd-4fe4-941c-46bde8867d88","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f993c8f12f6fc424e52cb1a3c3c440d1951be1c6ac80a05030782a0c2651175a"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bf508fb7b86db8186c426efac7189cde02017bd51df5a2f8b1c8a24b09a2f33"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33a564e23c2e25bab3d43a9ab135f746578ca8b9ac816d338c5ce8ddd65d1675"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/694209cc543f61f09a2b5df20253d0da61db5a25f98a9bf2f2e22bf5eb4d2ed5"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5263a286785862d59c8719e6d15affacda583410bc490617fe91b0d25e7d588a"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/891da924cec216cad2eccd71083d65ef024ea7be61061161556861458eb055f7"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84aea962a445cf2a72ef5866a43f2bbfd7f79623bb75b367e1f76a4cedb6f0e0"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61dcb66267bd0b3ff4644a666864586c6eb0f2500d814ac4baeac8ade742b801"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bee03ac7722865b30fe607c27e166b9cfb5c1629f69f806de66d6f9a80462ad8"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/376c434715ac9ec9a20870aaff19801a01103b26b9e32390da2870ee43fe444a"} {"level":"info","ts":"2026-07-28T13:46:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58c379dd23008c7243bb5080740443e123f0521728327a88fa143c66c07a964b"} {"level":"info","ts":"2026-07-28T13:46:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c13caccde5cd4fa83203063b8278884c6c09a8b912c370509770c04e535e4c"}