{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"error","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"debug","ts":"2026-07-14T01:45:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"}
{"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"}
{"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"}
{"level":"debug","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T01:45:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"}
{"level":"info","ts":"2026-07-14T01:45:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48824","PortSpecifier":{"PortValue":48824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48824","PortSpecifier":{"PortValue":48824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":105315044},"http":{"id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9e5ff97-9a4a-4d87-b5d1-87dd7f261be3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35850","PortSpecifier":{"PortValue":35850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":146732664},"http":{"id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7da24a7f-95a8-4cf9-87bd-beaf50f63b66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48828","PortSpecifier":{"PortValue":48828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b888a68d-bed1-4c47-8b99-e099c726cd11","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48828","PortSpecifier":{"PortValue":48828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993548,"nanos":188611203},"http":{"id":"b888a68d-bed1-4c47-8b99-e099c726cd11","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b888a68d-bed1-4c47-8b99-e099c726cd11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993549,"nanos":252516233},"http":{"id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5bd153-581d-43b3-8cdc-4637c5cac882","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46352","PortSpecifier":{"PortValue":46352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993550,"nanos":292591311},"http":{"id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OKSE66ccsB78EbD_JBtlbK6KZNb6cjiFI7D101ZFyZuRB4aOjkISerijHNh\"}"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","subscription":"e2e-rate-iso-a-db48ef","tenant":"e2e-shared-a-c6543c","userId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-db48ef\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-db48ef"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b2c9c547-35bb-49a1-95f4-04f15588c56a","keyName":"e2e-rate-a-db48ef","selected_subscription":"e2e-rate-iso-a-db48ef","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-db48ef@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-db48ef","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29cf057e-6d85-4f73-ab9e-7f07809488b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45664","PortSpecifier":{"PortValue":45664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":261534667},"http":{"id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3dff1f5c-b7d4-4818-b05e-6a3baf40f2e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57da5657-cf55-4d6d-8761-8b25895a48e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58074","PortSpecifier":{"PortValue":58074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":299349603},"http":{"id":"57da5657-cf55-4d6d-8761-8b25895a48e0","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"17981b34-9dd0-461a-94f5-e83385b60626","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"]}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb6ac66b5b7b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=94e1b777-5d8b-4701-b433-fb6b9fbdde69"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"17981b34-9dd0-461a-94f5-e83385b60626","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57da5657-cf55-4d6d-8761-8b25895a48e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45666","PortSpecifier":{"PortValue":45666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993563,"nanos":334147770},"http":{"id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604f8546-2c14-4cf2-bc72-37d84e9ad894","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45678","PortSpecifier":{"PortValue":45678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"007e84df-d3f5-4956-8f37-6518823fb129","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45678","PortSpecifier":{"PortValue":45678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993564,"nanos":376201099},"http":{"id":"007e84df-d3f5-4956-8f37-6518823fb129","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"007e84df-d3f5-4956-8f37-6518823fb129","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007e84df-d3f5-4956-8f37-6518823fb129","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007e84df-d3f5-4956-8f37-6518823fb129","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007e84df-d3f5-4956-8f37-6518823fb129","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3839258a-15ca-4515-bb4d-488de6b35557","method":"POST","path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions","host":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993565,"nanos":412765219},"http":{"id":"3839258a-15ca-4515-bb4d-488de6b35557","method":"POST","headers":{":authority":"e2e-shared-a-c6543c.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZeOzddbxQMa8nRbE_hEvrggCCnbbdGVwWuWWM0Pb2DshduZI1OGdjyHfXrmv\"}"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","subscription":"e2e-rate-iso-a-9e3afb","tenant":"e2e-shared-a-c6543c","userId":"822318bc-d0c6-441b-a7cb-48649ff7546b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\",\"requestedSubscription\":\"e2e-rate-iso-a-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c6543c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3839258a-15ca-4515-bb4d-488de6b35557","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c6543c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9e3afb"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3839258a-15ca-4515-bb4d-488de6b35557","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"822318bc-d0c6-441b-a7cb-48649ff7546b","keyName":"e2e-rate-a-9e3afb","selected_subscription":"e2e-rate-iso-a-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-a-c6543c/e2e-rate-iso-a-9e3afb@ai-tenant-e2e-shared-a-c6543c/rate-test-model-c6543c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6543c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9e3afb","namespace":"ai-tenant-e2e-shared-a-c6543c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3839258a-15ca-4515-bb4d-488de6b35557","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3839258a-15ca-4515-bb4d-488de6b35557","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","method":"POST","path":"/ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee/v1/completions","host":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58076","PortSpecifier":{"PortValue":58076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783993565,"nanos":451983349},"http":{"id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","method":"POST","headers":{":authority":"e2e-shared-b-a21fee.apps.8aab2533-ab91-4c9f-b5ce-bb6ac66b5b7b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KJHnubyjXIASItBf_RaQKLe4ovGSFTJ5BR3QqrLDm1MiigWZFJmCS9Mv2bbU"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KJHnubyjXIASItBf_RaQKLe4ovGSFTJ5BR3QqrLDm1MiigWZFJmCS9Mv2bbU\"}"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9bd73cf1-d012-4736-8318-87aa4af499b9","keyName":"e2e-rate-b-9e3afb","subscription":"e2e-rate-iso-b-9e3afb","tenant":"e2e-shared-b-a21fee","userId":"9bd73cf1-d012-4736-8318-87aa4af499b9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\",\"requestedSubscription\":\"e2e-rate-iso-b-9e3afb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a21fee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a21fee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9e3afb","namespace":"ai-tenant-e2e-shared-b-a21fee","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a21fee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9e3afb"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9bd73cf1-d012-4736-8318-87aa4af499b9","keyName":"e2e-rate-b-9e3afb","selected_subscription":"e2e-rate-iso-b-9e3afb","selected_subscription_key":"ai-tenant-e2e-shared-b-a21fee/e2e-rate-iso-b-9e3afb@ai-tenant-e2e-shared-b-a21fee/rate-test-model-a21fee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a21fee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9e3afb","namespace":"ai-tenant-e2e-shared-b-a21fee","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T01:46:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90430b04-c7a2-41f4-94cb-7ba6d107337b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c81e9df5209f0c417dc67a9331df1175dacefc2f3f3ac884ca26774e0b7b262"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2152530b6998f832f4b4e8d3ac7c7209bff38f7cf5e3f02e3048fabf6ff132b8"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a09e02674abec99ff75c9352fd208b5a36221190cbe36a751d51e424f4601b30"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e7e3ac9f7838c4e8ea056d0cc4816d5366e2d6ec49ba3da9ceac41b43cae8b"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf5ee44db021a68bf415d54d2d6b5340d18df6d586477972efd94d2494ffcce"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15a4e43bae9567404d1fa9f55e2a30cc81f2f9ac2ed0fdda0ac79afff1de1677"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f8d9aee6da449af506d9101f64caff39272d29433fe2fee38e9c69eec3289f1"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a42dbb3691b766e454948b3ec6f87f0fab90a060e6f5b37560a2eab13aca23c"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0cb79a01e8a3dc68aea8e81f65dc81f6f55630a466eb44f62c7ab09a7f34060"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/582e2ba26688f33a14fc3728afa453b16c0de5b93ad66520fcfbf8b667be0bac"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/478612675f3399c90b7aef4b02c4bd2516975d42ab99e684f5c19e0757ba8076"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7ff57f380a9ce209c5fc64084b07d331149327988ddd3d1d31f27b04cd524b9"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11bdd5bfeb0e100f83cc03494e76dbb6252f00d65f724880e08260f42234ef62"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73b0f469d415457c5a7d69d6f379d11ca6700a42fad6cd20d35808c57c8bd2a1"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eea02750c90ade3850689b918f3ee467240250e6a03843dfec71d3906ea3415d"}
{"level":"info","ts":"2026-07-14T01:46:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59cd878f30c2e93fac42dc9fb29f3fcfb12b821904d23992b817f1ad5b2dd3b8"}
{"level":"info","ts":"2026-07-14T01:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b54b1aacf52d6dab06d99262a60cc744dda287682658da8fe81e2c6d86b2c6"}
{"level":"info","ts":"2026-07-14T01:46:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd9a2732850b836289ba7ee677ddb69fec015b7a24601c55a3e514840264a2ed"}
{"level":"info","ts":"2026-07-14T01:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bc82f50fe8ee82302a88ffcc7cdc6014dc25c34c49790d6676bd56a232ffcaa"}
{"level":"info","ts":"2026-07-14T01:46:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57bef05959b28085e86c4b9e15b19fc8d3f8b2b39032734c86bb67eae574d0ce"}
{"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b41cd5cd9a71d9d509da90ebb52c5710795f57eef51d5d30b6cc126eea34dbd"}
{"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda3051e3fb1a48132d6eacb9e2441a910b0602f4a2553a076aa892414f54d67"}
{"level":"info","ts":"2026-07-14T01:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8668a6449072b33585e966df41bd3b1937db18f6bac5021ea6c12bd7791699"}
{"level":"info","ts":"2026-07-14T01:47:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be45d0ff5107d5eee80bffa0c77364e4d019b3a89fa6e39d38d529e6e5a4513c"}