{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"error","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4f947d6-0c41-43f9-a919-289cf8614605","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":553881665},"http":{"id":"c4f947d6-0c41-43f9-a919-289cf8614605","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82b29238-ca07-4141-9e2a-82b42e0a32da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":601233243},"http":{"id":"82b29238-ca07-4141-9e2a-82b42e0a32da","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"226812c7-6259-4cea-8539-06fa2aa388ec","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":639245814},"http":{"id":"226812c7-6259-4cea-8539-06fa2aa388ec","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58372","PortSpecifier":{"PortValue":58372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"119eb6f9-f34f-4565-8850-ea10faecff48","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58372","PortSpecifier":{"PortValue":58372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735000,"nanos":702028797},"http":{"id":"119eb6f9-f34f-4565-8850-ea10faecff48","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58384","PortSpecifier":{"PortValue":58384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed84847-f11c-4fcd-9790-224a594c4d65","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58384","PortSpecifier":{"PortValue":58384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735001,"nanos":739178717},"http":{"id":"3ed84847-f11c-4fcd-9790-224a594c4d65","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":475540728},"http":{"id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":513891072},"http":{"id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":544549839},"http":{"id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735013,"nanos":588817051},"http":{"id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f436534-1aea-43c5-88ee-555eb179b1c7","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735014,"nanos":622501344},"http":{"id":"1f436534-1aea-43c5-88ee-555eb179b1c7","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6d9561f-f81c-4426-9d9e-78d886f918be","method":"POST","path":"/ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb/v1/completions","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735014,"nanos":657348932},"http":{"id":"c6d9561f-f81c-4426-9d9e-78d886f918be","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TESReuCd3UhWZCSX_9UvNexDFpd1M8DQ1CuHxqQ5iuUNYfiKn3YeWJrfp1sz"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TESReuCd3UhWZCSX_9UvNexDFpd1M8DQ1CuHxqQ5iuUNYfiKn3YeWJrfp1sz\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"74f847a7-8d40-4349-8bca-8cee3341ebac","keyName":"e2e-rate-b-c4233f","subscription":"e2e-rate-iso-b-c4233f","tenant":"e2e-shared-b-98dbcb","userId":"74f847a7-8d40-4349-8bca-8cee3341ebac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\",\"requestedSubscription\":\"e2e-rate-iso-b-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 224, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-98dbcb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4233f","namespace":"ai-tenant-e2e-shared-b-98dbcb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"74f847a7-8d40-4349-8bca-8cee3341ebac","keyName":"e2e-rate-b-c4233f","selected_subscription":"e2e-rate-iso-b-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-b-98dbcb/e2e-rate-iso-b-c4233f@ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-98dbcb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4233f","namespace":"ai-tenant-e2e-shared-b-98dbcb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"info","ts":"2026-07-11T01:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}