{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ccb5c2c-6754-49cc-9c93-f33e924d4a0d","keyName":"e2e-sub-iso-df2e3c","subscription":"e2e-shared-sub-df3bbd","tenant":"e2e-shared-a-99612b","userId":"6ccb5c2c-6754-49cc-9c93-f33e924d4a0d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45974ca9-34bc-4505-901b-6a86109a9844","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/sub-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-df3bbd"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45974ca9-34bc-4505-901b-6a86109a9844","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45974ca9-34bc-4505-901b-6a86109a9844","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45974ca9-34bc-4505-901b-6a86109a9844","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53264","PortSpecifier":{"PortValue":53264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"387675e2-7b6e-41a7-8154-d07d149d91c5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53264","PortSpecifier":{"PortValue":53264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714499,"nanos":108417301},"http":{"id":"387675e2-7b6e-41a7-8154-d07d149d91c5","method":"POST","headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vIe0o695Lkgz9qA4_WhQaPz0NJLMh59ddQMmiu3ik8IEJfywHpZVZOHFUwqT"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vIe0o695Lkgz9qA4_WhQaPz0NJLMh59ddQMmiu3ik8IEJfywHpZVZOHFUwqT\"}"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ac89df1-5b57-4a89-9122-b095b3a318bc","keyName":"e2e-sub-iso-8ece76","subscription":"e2e-shared-sub-df3bbd","tenant":"e2e-shared-b-88ceff","userId":"8ac89df1-5b57-4a89-9122-b095b3a318bc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-88ceff/sub-test-model-88ceff\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-88ceff/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-df3bbd"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:01:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387675e2-7b6e-41a7-8154-d07d149d91c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3638b4461d7e3e282e0cdb23d951322282d934cabf973eb92557f010bc156f04"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6da92efa4f9d64fbad02f715a3f9ce22b3541ec72cfaf93671ecccc8bcf8de95"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e936d8e0e4b5917e36e7e83719e008386c7cc7ddcd488f80fa946aa70dd53e7a"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"}
{"level":"info","ts":"2026-07-22T10:01:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c90c9a6d26118114cde3457d8b8add3441e7b6f54a65b8966e1e6de42ef5838"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d24f65cca01ff3fbaff75bfb35026aa6072e73a5d0252d668f9e8b3ca5959cf8"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24019193f476898e6450558f0ab35efe643f3b5c36bc951ff9984acecf44631c"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6acf1376accb2b5d3f9e3f78916cfabe7dcdd56be87f35d3d2a6aec3efb8cf02"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837ec74b8761e4b39509264eaff65db0bac06d785d5a8f0db83fff406e8b990f"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35929ceb030332d1429b66bff8d2b744eaa4a733dbf41808075406b932ef3f2b"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c487f2ddb582e3b3dd00d3f0d640e33668a0b319c594c913bb63d23ad16675ce"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ffc2da205645c6ad0645bb0809b1923e1f02477196e607ce7275131a9522e43"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22d63682117ea4ab5202af0d2698cba078b48efae93507e9c2cd200108bb2b77"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a976b76ca8e483593c06cc470657161f6a4eeff9d52a5816e92e1f6367f91c8"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e9f294e06d8041cb5ec35fea1c974fb57428a6f03a84e565f6ae534f1ff8596"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af90f468f45fe74572016ce77491218a534f6db69fd991ab0a51e1f535eb17e"}
{"level":"info","ts":"2026-07-22T10:01:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a2c69d3bc4dc8f539c40bf92ad5b5e66dde9a5292311d168af1bdda04506086"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"error","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b"}
{"level":"info","ts":"2026-07-22T10:02:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054"}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825"}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035"}
{"level":"info","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T10:02:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T10:02:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934"}
{"level":"info","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T10:02:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae"}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33570","PortSpecifier":{"PortValue":33570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70e9e2f0-1f85-448c-9db1-04504fff4680","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33570","PortSpecifier":{"PortValue":33570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714559,"nanos":773845529},"http":{"id":"70e9e2f0-1f85-448c-9db1-04504fff4680","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"]}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70e9e2f0-1f85-448c-9db1-04504fff4680","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58848","PortSpecifier":{"PortValue":58848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58848","PortSpecifier":{"PortValue":58848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714559,"nanos":811597372},"http":{"id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","method":"POST","headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"]}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-88ceff/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d2f87b-271d-4220-92f1-70e562ddf3c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33584","PortSpecifier":{"PortValue":33584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714559,"nanos":849530559},"http":{"id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo\"}"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","subscription":"e2e-rate-iso-a-bc9ea6","tenant":"e2e-shared-a-99612b","userId":"da11d217-a625-419a-a32d-2f5c03481ddf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-bc9ea6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc9ea6"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","selected_subscription":"e2e-rate-iso-a-bc9ea6","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-bc9ea6@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17c16b6-65b7-4a85-b4fb-1a52960778ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13587650-8c4c-4c43-bc0c-6c136824a059","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33592","PortSpecifier":{"PortValue":33592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714560,"nanos":910168195},"http":{"id":"13587650-8c4c-4c43-bc0c-6c136824a059","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo\"}"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","subscription":"e2e-rate-iso-a-bc9ea6","tenant":"e2e-shared-a-99612b","userId":"da11d217-a625-419a-a32d-2f5c03481ddf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-bc9ea6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc9ea6"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","selected_subscription":"e2e-rate-iso-a-bc9ea6","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-bc9ea6@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13587650-8c4c-4c43-bc0c-6c136824a059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33600","PortSpecifier":{"PortValue":33600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714561,"nanos":945046550},"http":{"id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WzRTXaagsa0Hl76v_DPyJgszqWk5ekmuQDom9CLQLeq4inEmYDAxIdTmOLlo\"}"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","subscription":"e2e-rate-iso-a-bc9ea6","tenant":"e2e-shared-a-99612b","userId":"da11d217-a625-419a-a32d-2f5c03481ddf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-bc9ea6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bc9ea6"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da11d217-a625-419a-a32d-2f5c03481ddf","keyName":"e2e-rate-a-bc9ea6","selected_subscription":"e2e-rate-iso-a-bc9ea6","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-bc9ea6@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bc9ea6","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b252fd7-e266-468e-ba2c-b3787d4754b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a55399-422b-4302-b31d-1d276b126df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42738","PortSpecifier":{"PortValue":42738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21a55399-422b-4302-b31d-1d276b126df8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a55399-422b-4302-b31d-1d276b126df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42738","PortSpecifier":{"PortValue":42738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714574,"nanos":861225464},"http":{"id":"21a55399-422b-4302-b31d-1d276b126df8","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21a55399-422b-4302-b31d-1d276b126df8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"]}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21a55399-422b-4302-b31d-1d276b126df8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a55399-422b-4302-b31d-1d276b126df8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a55399-422b-4302-b31d-1d276b126df8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a55399-422b-4302-b31d-1d276b126df8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a32d072-4230-4048-9f76-e087110ba424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55378","PortSpecifier":{"PortValue":55378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a32d072-4230-4048-9f76-e087110ba424","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a32d072-4230-4048-9f76-e087110ba424","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55378","PortSpecifier":{"PortValue":55378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714574,"nanos":896010706},"http":{"id":"0a32d072-4230-4048-9f76-e087110ba424","method":"POST","headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a32d072-4230-4048-9f76-e087110ba424","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"]}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a32d072-4230-4048-9f76-e087110ba424","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8bb457819eaa"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6af32347-1c08-4a0c-acd0-cc9d7d60e45f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c0138b8c-d332-45f7-8485-8049ee38ecdf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-88ceff/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a32d072-4230-4048-9f76-e087110ba424","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a32d072-4230-4048-9f76-e087110ba424","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a32d072-4230-4048-9f76-e087110ba424","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42754","PortSpecifier":{"PortValue":42754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42754","PortSpecifier":{"PortValue":42754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714574,"nanos":931916650},"http":{"id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc\"}"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","subscription":"e2e-rate-iso-a-e55826","tenant":"e2e-shared-a-99612b","userId":"5a5560a7-8422-423e-8a16-ffab591854b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-e55826\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e55826"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","selected_subscription":"e2e-rate-iso-a-e55826","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-e55826@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e39c43-c8f0-4402-b3cd-b36ce05b1557","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42770","PortSpecifier":{"PortValue":42770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a4b0318-f20c-4d11-972b-8615162325cb","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42770","PortSpecifier":{"PortValue":42770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714575,"nanos":967294203},"http":{"id":"3a4b0318-f20c-4d11-972b-8615162325cb","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc\"}"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","subscription":"e2e-rate-iso-a-e55826","tenant":"e2e-shared-a-99612b","userId":"5a5560a7-8422-423e-8a16-ffab591854b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-e55826\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e55826"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","selected_subscription":"e2e-rate-iso-a-e55826","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-e55826@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a4b0318-f20c-4d11-972b-8615162325cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42782","PortSpecifier":{"PortValue":42782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","method":"POST","path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions","host":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42782","PortSpecifier":{"PortValue":42782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714577,"nanos":4131431},"http":{"id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","method":"POST","headers":{":authority":"e2e-shared-a-99612b.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xhIoxLG5cmTkL9j_FR55P1i9woyfEzcUUmPyA3Q655fLKNViE9N1pmU1kPc\"}"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","subscription":"e2e-rate-iso-a-e55826","tenant":"e2e-shared-a-99612b","userId":"5a5560a7-8422-423e-8a16-ffab591854b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\",\"requestedSubscription\":\"e2e-rate-iso-a-e55826\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-99612b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-99612b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e55826"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5560a7-8422-423e-8a16-ffab591854b3","keyName":"e2e-rate-a-e55826","selected_subscription":"e2e-rate-iso-a-e55826","selected_subscription_key":"ai-tenant-e2e-shared-a-99612b/e2e-rate-iso-a-e55826@ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-99612b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e55826","namespace":"ai-tenant-e2e-shared-a-99612b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-99612b/rate-test-model-99612b"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb625bf-aa11-48d0-ac39-dfcbce038abb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55382","PortSpecifier":{"PortValue":55382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","method":"POST","path":"/ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff/v1/completions","host":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55382","PortSpecifier":{"PortValue":55382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784714577,"nanos":41829800},"http":{"id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","method":"POST","headers":{":authority":"e2e-shared-b-88ceff.apps.f38c89e1-76ed-4f1e-b40e-8bb457819eaa.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zc3pHxEvTtokBALc_yfsx4ey4eWAluTN69nTx5tBTanALgvYXfQOhjnR7hkx"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zc3pHxEvTtokBALc_yfsx4ey4eWAluTN69nTx5tBTanALgvYXfQOhjnR7hkx\"}"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fda8eebc-cb95-4086-b2a6-173278c6fd92","keyName":"e2e-rate-b-e55826","subscription":"e2e-rate-iso-b-e55826","tenant":"e2e-shared-b-88ceff","userId":"fda8eebc-cb95-4086-b2a6-173278c6fd92","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff\",\"requestedSubscription\":\"e2e-rate-iso-b-e55826\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-88ceff.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-88ceff","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e55826","namespace":"ai-tenant-e2e-shared-b-88ceff","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff"}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-88ceff/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e55826"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fda8eebc-cb95-4086-b2a6-173278c6fd92","keyName":"e2e-rate-b-e55826","selected_subscription":"e2e-rate-iso-b-e55826","selected_subscription_key":"ai-tenant-e2e-shared-b-88ceff/e2e-rate-iso-b-e55826@ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-88ceff","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e55826","namespace":"ai-tenant-e2e-shared-b-88ceff","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-88ceff/rate-test-model-88ceff"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T10:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c9afc6a-75d6-43ae-aa2d-a0eb958cff1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/863211098bbc6101fbcbef82375ec209a0ef4885dd75bd38b1e95eb303bfe50c"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b2a89a6288d53f38398c61fcaddc2dd038910d19d89e38fa67c2c705fa00b65"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cbdb985a8082ce62f351b6d2c46d992ea762b82542737481733fe3ab91a7d0e"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84b24b43a7118a8191f83684d633ff124e3068e6fac4ef9588f63e1359637ce0"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ddba0489990c2200f4ad8195aa77924caecff429a9512ac044f701fe5edc8e6"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca363730e96cbd6a8e685d7f0b6d28d00dc98c6c64bf878d7884b510bfdeea2"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/455e9f883f7501e825f376dcb1b22365d4bf93a0e809ed463cd463e27e6e476f"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d603cd338a7e86807f8ebaafb000c43c73fc6f3fcbf6a21676685b4099de054"}
{"level":"info","ts":"2026-07-22T10:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6bf1d649b8e0c97d6ba0a9b8449aa604dfefc693d06ad80c5f9ad135d2c5049"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21de270e15a1cb337f507a4a1ac53dbef0ede5aa5a0c38f4a4748c5c945e3825"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d87df4323219e70ce524dd9754f1e2ea8fc3d44ced4f79552e2878532fdc85b"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44c9a4cff6ad3dc4b60e3cb94b134d536fd5a0237b28574469162554a17c93d1"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122c709e60a98696d6a511d2ae8d71aa588d583ce35fb6fa04f54b151c2ea87d"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e87ac6a23e99a02dfb46199cf7cf64ac91b8a64c13e761b55d8bbeadc7f64ab6"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9720dc249b5d8c187beffd6ce56bfe7e3336e9d4193b29359f9777f568348bae"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/896d068120aaa8a502d471bf434951281d45611cc2fd861a8397aa02cb1a0934"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fd7e33daf5d02cfc54d7e25eb7e5e1bcbc72179b870ed0edeca4c1e57da060"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1f39dae223d8b933bea407453821d04c9222ccbf6e7e503bb4ba1d5cd55ef41"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8fd14245bcc925117db749b6c1cf62b27b2f985fc4310d2365188b68295bc6e"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50bcb9d8ac430caa65bb949355a3872cbd6298f59ea082f33764c59db67e5e2a"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/991e86b85cc7b0c606bd4cf9e13fa39f64ec5141293e527c964acdf31b7ad035"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb6344e4af363b3dbf71f9bd3901d751527d6278f4654c09c32a639953e5a01"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b6cd92c59cb04f8a68735c32caad0009e464f320a80f201f87b97a2ee0ee4c"}
{"level":"info","ts":"2026-07-22T10:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f21853102e1978c2fbf342eb9af37c56f6613e1823e45052b6c06024b48de4ae"}