{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"error","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":464439526},"http":{"id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0f39f91-93eb-41a3-be7f-899b1d6e6998","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36410","PortSpecifier":{"PortValue":36410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":505437941},"http":{"id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a639ee6-4203-4876-bc7a-85eb1a610fc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452515,"nanos":551153926},"http":{"id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc24a4cb-f21b-4d12-8a54-a7da865f1127","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452516,"nanos":604860647},"http":{"id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9239c6b-f424-4e11-a30e-f8bb6cbeb0ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"362e33c9-0e41-4c91-b036-fe270379b8a4","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52510","PortSpecifier":{"PortValue":52510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452517,"nanos":645647702},"http":{"id":"362e33c9-0e41-4c91-b036-fe270379b8a4","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O1aliO53aFKkxIQf_ogK7aBjsuIyQc6kxrUTEff9n1tsqFwGXhIPQGRuab69\"}"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","subscription":"e2e-rate-iso-a-81a38a","tenant":"e2e-shared-a-44233f","userId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-81a38a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81a38a"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7b9b5ae1-531b-4300-bbd5-304c0d464e88","keyName":"e2e-rate-a-81a38a","selected_subscription":"e2e-rate-iso-a-81a38a","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-81a38a@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81a38a","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362e33c9-0e41-4c91-b036-fe270379b8a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36322","PortSpecifier":{"PortValue":36322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e884926-6d33-4179-b13a-0869c6718f7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36322","PortSpecifier":{"PortValue":36322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":686921257},"http":{"id":"1e884926-6d33-4179-b13a-0869c6718f7d","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e884926-6d33-4179-b13a-0869c6718f7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5445b72a-064d-4637-a866-a75c43c4b675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5445b72a-064d-4637-a866-a75c43c4b675","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5445b72a-064d-4637-a866-a75c43c4b675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":720963818},"http":{"id":"5445b72a-064d-4637-a866-a75c43c4b675","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5445b72a-064d-4637-a866-a75c43c4b675","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"]}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5445b72a-064d-4637-a866-a75c43c4b675","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f1aeaf821449"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=59ed1cbb-a5f2-4a5c-8273-f1f3b4deeacd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9d4bd38-8e54-4886-800e-a6e947b05cd4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5445b72a-064d-4637-a866-a75c43c4b675","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5445b72a-064d-4637-a866-a75c43c4b675","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36338","PortSpecifier":{"PortValue":36338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3179adaa-a280-46cb-9d6b-6308416155b1","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36338","PortSpecifier":{"PortValue":36338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452530,"nanos":754782206},"http":{"id":"3179adaa-a280-46cb-9d6b-6308416155b1","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3179adaa-a280-46cb-9d6b-6308416155b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"057640dd-25a4-4514-a6ee-0c13c97d997e","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36354","PortSpecifier":{"PortValue":36354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452531,"nanos":794731832},"http":{"id":"057640dd-25a4-4514-a6ee-0c13c97d997e","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"057640dd-25a4-4514-a6ee-0c13c97d997e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"996ea8c5-4059-4f74-971a-cce4110fff0b","method":"POST","path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions","host":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36368","PortSpecifier":{"PortValue":36368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452532,"nanos":830753915},"http":{"id":"996ea8c5-4059-4f74-971a-cce4110fff0b","method":"POST","headers":{":authority":"e2e-shared-a-44233f.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RawUqjt3arSv4vse_UB4jGdbACkShzEMpnZfLtiIoRwsdwg96biTtj2lxGn\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","subscription":"e2e-rate-iso-a-858b11","tenant":"e2e-shared-a-44233f","userId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\",\"requestedSubscription\":\"e2e-rate-iso-a-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-44233f.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d39bba5-351a-467e-8cd8-3ce6bfe5d8a2","keyName":"e2e-rate-a-858b11","selected_subscription":"e2e-rate-iso-a-858b11","selected_subscription_key":"ai-tenant-e2e-shared-a-44233f/e2e-rate-iso-a-858b11@ai-tenant-e2e-shared-a-44233f/rate-test-model-44233f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44233f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-858b11","namespace":"ai-tenant-e2e-shared-a-44233f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996ea8c5-4059-4f74-971a-cce4110fff0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","method":"POST","path":"/ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191/v1/completions","host":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452532,"nanos":869204887},"http":{"id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","method":"POST","headers":{":authority":"e2e-shared-b-6f2191.apps.33c0e0ca-6853-4d67-9e55-f1aeaf821449.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gcOUxgfgmkB3JdbX_nzgra0EjUCpofe0OwlrTCC4udGBlRpOZaAGb7aFfwzW"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gcOUxgfgmkB3JdbX_nzgra0EjUCpofe0OwlrTCC4udGBlRpOZaAGb7aFfwzW\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9102085a-88db-4f01-9455-79920e016f39","keyName":"e2e-rate-b-858b11","subscription":"e2e-rate-iso-b-858b11","tenant":"e2e-shared-b-6f2191","userId":"9102085a-88db-4f01-9455-79920e016f39","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\",\"requestedSubscription\":\"e2e-rate-iso-b-858b11\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6f2191.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6f2191","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-858b11","namespace":"ai-tenant-e2e-shared-b-6f2191","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-858b11"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9102085a-88db-4f01-9455-79920e016f39","keyName":"e2e-rate-b-858b11","selected_subscription":"e2e-rate-iso-b-858b11","selected_subscription_key":"ai-tenant-e2e-shared-b-6f2191/e2e-rate-iso-b-858b11@ai-tenant-e2e-shared-b-6f2191/rate-test-model-6f2191","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6f2191","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-858b11","namespace":"ai-tenant-e2e-shared-b-6f2191","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f43be90-6cbe-4f05-9fd8-5a2386481670","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5fce208214eee7af699998d7b0a98f894501d127a4b964bc1ac3acd37b8d4ed"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a9d62551f266c13bddc239113d48bf93c0ac5a94fe8bc8bca9ede03b1fa7918"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5335e5da03e9e3318cd8324619b0a06d1a3828682a4da9dd386a8c0c875a32"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f491a11896b577ae9fb8dc939bffe55eb481ffa8cd41922e50da788a8166e91"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/627b0ebcf46ad26eff77d05604f30e7b0b8813446e185416f0e708120ff243fc"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c99a9771e5708c464b10db2822d520b934dc02190ee9129c0a2b466d0934631b"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cdc59bf2f763485ec80aae3ab48481b4417e7ecab99a3fe2f001be8a79dd0f8"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f083934a97caf93cf0d574602f846a3b2e4787e3c73f67cda98e3e19571eb2ba"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a92d775f83c4ea2ecbc8680f8ef7c521d8333d603ab3cbd0ae6b7c5e67abb53"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9087612eb4119a3cd8d2744f1e18018087f93982476017c6a80d0e96f7e88e31"}
{"level":"info","ts":"2026-07-07T19:29:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42b2327e8e92b2888d5bae9f6788bad67b2c30eb4353c0c83771e3599e74d25e"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bfb019e257bea37cbbcef85c6ffadf8686a7569a1449a0bdd24aadde8f5935d"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d7affefb493e9ba4aabff819783de92ad91beb2fe04ebf74fc8cf442a1553e8"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1aca69fce88eb70a9fa2875b71cc486327935a759bd47289d57017459ee20b4"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abee0daa7459c471d6ae4ee44270f7d0f32fc2551b08a331a1603b97dd439d5d"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e8d41998c88b7c0f4f6dcb4d24e7a1cff6c0841c739f74f4d780a255af1eb29"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4041410a732e682b4aa8c5d6ed011069552d8e54cffe8b6dae3a0c2709772e"}
{"level":"info","ts":"2026-07-07T19:29:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b230795a06248418dac807d16009d969733616225b634319e04a9d2ad62a5ac5"}
{"level":"info","ts":"2026-07-07T19:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e01103d52f30eff8d3a33d20b1931ed1bdfb3484a80843dbd381392c0f40e35b"}
{"level":"info","ts":"2026-07-07T19:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be794b41fafdb3925c9fe77d334d5b32355d93430d672153af4f7094eec1127"}