{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"error","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"error","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37156","PortSpecifier":{"PortValue":37156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","object":"source:{address:{socket_address:{address:\"10.133.0.9:37156\"  port_value:37156}}}  destination:{address:{socket_address:{address:\"10.132.0.60:443\"  port_value:443}}}  request:{time:{seconds:1785843317  nanos:634182055}  http:{id:\"2b1259a8-743c-4b5f-890d-7807efe81cdb\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"2b1259a8-743c-4b5f-890d-7807efe81cdb\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5524afca57290f0484e89509fe245efa8332d53f7d4889cd5c2d7dce4cab2117\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5524afca57290f0484e89509fe245efa8332d53f7d4889cd5c2d7dce4cab2117"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b1259a8-743c-4b5f-890d-7807efe81cdb"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":634182055,"seconds":1785843317}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37156},"address":"10.133.0.9:37156"}}}}},"destination":{"address":"10.132.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5524afca57290f0484e89509fe245efa8332d53f7d4889cd5c2d7dce4cab2117"},"headers":{":authority":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b1259a8-743c-4b5f-890d-7807efe81cdb"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":634182055,"seconds":1785843317},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:37156","port":37156}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b1259a8-743c-4b5f-890d-7807efe81cdb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55466","PortSpecifier":{"PortValue":55466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6b47475-3d45-432d-9974-4b905eda3a4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","object":"source:{address:{socket_address:{address:\"10.133.0.9:55466\"  port_value:55466}}}  destination:{address:{socket_address:{address:\"10.132.0.61:443\"  port_value:443}}}  request:{time:{seconds:1785843317  nanos:671217865}  http:{id:\"c6b47475-3d45-432d-9974-4b905eda3a4e\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"c6b47475-3d45-432d-9974-4b905eda3a4e\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c6b47475-3d45-432d-9974-4b905eda3a4e"},"host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"c6b47475-3d45-432d-9974-4b905eda3a4e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":671217865,"seconds":1785843317}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55466},"address":"10.133.0.9:55466"}}}}},"destination":{"address":"10.132.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"},"headers":{":authority":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c6b47475-3d45-432d-9974-4b905eda3a4e"},"host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"c6b47475-3d45-432d-9974-4b905eda3a4e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":671217865,"seconds":1785843317},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:55466","port":55466}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c74755/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6b47475-3d45-432d-9974-4b905eda3a4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","object":"source:{address:{socket_address:{address:\"10.133.0.9:37164\"  port_value:37164}}}  destination:{address:{socket_address:{address:\"10.132.0.60:443\"  port_value:443}}}  request:{time:{seconds:1785843317  nanos:718481271}  http:{id:\"cd3a4c50-8467-44b7-8de8-4230c5e91a46\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"cd3a4c50-8467-44b7-8de8-4230c5e91a46\"}  path:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"  host:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FzwirONC0FEVUbyz_NMQanXgwES0qXsgInyDijVlsNw848S6zVpl5aldEFCb"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","subscription":"e2e-rate-iso-a-39860d","tenant":"e2e-shared-a-ed8ca8","userId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":718481271,"seconds":1785843317}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37164},"address":"10.133.0.9:37164"}}}}},"destination":{"address":"10.132.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f"},"headers":{":authority":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":718481271,"seconds":1785843317},"url_path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:37164","port":37164}}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39860d"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","selected_subscription":"e2e-rate-iso-a-39860d","selected_subscription_key":"ai-tenant-e2e-shared-a-ed8ca8/e2e-rate-iso-a-39860d@ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd3a4c50-8467-44b7-8de8-4230c5e91a46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:37174","PortSpecifier":{"PortValue":37174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","object":"source:{address:{socket_address:{address:\"10.133.0.9:37174\"  port_value:37174}}}  destination:{address:{socket_address:{address:\"10.132.0.60:443\"  port_value:443}}}  request:{time:{seconds:1785843318  nanos:757941773}  http:{id:\"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZDhjYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVkOGNhOC1vcGVuc2hpZnQtZGVmYXVsdC02ZmQ2ODhmY2M2LXg0c2RzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVkOGNhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZDhjYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9\"}  path:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"  host:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FzwirONC0FEVUbyz_NMQanXgwES0qXsgInyDijVlsNw848S6zVpl5aldEFCb"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","subscription":"e2e-rate-iso-a-39860d","tenant":"e2e-shared-a-ed8ca8","userId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":757941773,"seconds":1785843318}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37174},"address":"10.133.0.9:37174"}}}}},"destination":{"address":"10.132.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f"},"headers":{":authority":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":757941773,"seconds":1785843318},"url_path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:37174","port":37174}}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39860d"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","selected_subscription":"e2e-rate-iso-a-39860d","selected_subscription_key":"ai-tenant-e2e-shared-a-ed8ca8/e2e-rate-iso-a-39860d@ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3dc4b8-0c99-4cb6-aadf-14b3b63027b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42362","PortSpecifier":{"PortValue":42362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9b97296-d268-4799-a619-7a3478b7ba97","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","object":"source:{address:{socket_address:{address:\"10.133.0.9:42362\"  port_value:42362}}}  destination:{address:{socket_address:{address:\"10.132.0.60:443\"  port_value:443}}}  request:{time:{seconds:1785843319  nanos:796295088}  http:{id:\"d9b97296-d268-4799-a619-7a3478b7ba97\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"d9b97296-d268-4799-a619-7a3478b7ba97\"}  path:\"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions\"  host:\"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FzwirONC0FEVUbyz_NMQanXgwES0qXsgInyDijVlsNw848S6zVpl5aldEFCb"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","subscription":"e2e-rate-iso-a-39860d","tenant":"e2e-shared-a-ed8ca8","userId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ed8ca8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d9b97296-d268-4799-a619-7a3478b7ba97"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"d9b97296-d268-4799-a619-7a3478b7ba97","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":796295088,"seconds":1785843319}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42362},"address":"10.133.0.9:42362"}}}}},"destination":{"address":"10.132.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f"},"headers":{":authority":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ed8ca8-kserve-workload-svc.ai-tenant-e2e-shared-a-ed8ca8.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.60~e2e-shared-a-ed8ca8-openshift-default-6fd688fcc6-x4sds.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d9b97296-d268-4799-a619-7a3478b7ba97"},"host":"e2e-shared-a-ed8ca8.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"d9b97296-d268-4799-a619-7a3478b7ba97","method":"POST","path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":796295088,"seconds":1785843319},"url_path":"/ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:42362","port":42362}}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-39860d"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87a45ff8-8f77-4752-bb26-0daf7b0d3917","keyName":"e2e-rate-a-39860d","selected_subscription":"e2e-rate-iso-a-39860d","selected_subscription_key":"ai-tenant-e2e-shared-a-ed8ca8/e2e-rate-iso-a-39860d@ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ed8ca8/models/facebook/opt-125m","name":"rate-test-model-ed8ca8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-39860d","namespace":"ai-tenant-e2e-shared-a-ed8ca8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ed8ca8/rate-test-model-ed8ca8"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9b97296-d268-4799-a619-7a3478b7ba97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44222","PortSpecifier":{"PortValue":44222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","method":"POST","path":"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions","host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","object":"source:{address:{socket_address:{address:\"10.133.0.9:44222\"  port_value:44222}}}  destination:{address:{socket_address:{address:\"10.132.0.61:443\"  port_value:443}}}  request:{time:{seconds:1785843319  nanos:835176363}  http:{id:\"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-c74755-kserve-workload-svc.ai-tenant-e2e-shared-b-c74755.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1jNzQ3NTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWM3NDc1NS1vcGVuc2hpZnQtZGVmYXVsdC02ZmM4NjZkZjU2LXRtdnNzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWM3NDc1NS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1jNzQ3NTUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1\"}  path:\"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions\"  host:\"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KMiymxKkHD4FdXUr_y7TUj0iopu1rDdwbwmJ4tSyfIFaXoOECHs3RdsIac5p"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66b37ff2-6c7c-4797-93ac-32e916906c13","keyName":"e2e-rate-b-39860d","subscription":"e2e-rate-iso-b-39860d","tenant":"e2e-shared-b-c74755","userId":"66b37ff2-6c7c-4797-93ac-32e916906c13","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c74755.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c74755/models/facebook/opt-125m","name":"rate-test-model-c74755","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39860d","namespace":"ai-tenant-e2e-shared-b-c74755","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755"}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-c74755-kserve-workload-svc.ai-tenant-e2e-shared-b-c74755.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1"},"host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","method":"POST","path":"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":835176363,"seconds":1785843319}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44222},"address":"10.133.0.9:44222"}}}}},"destination":{"address":"10.132.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"},"headers":{":authority":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-c74755-kserve-workload-svc.ai-tenant-e2e-shared-b-c74755.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1jNzQ3NTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWM3NDc1NS1vcGVuc2hpZnQtZGVmYXVsdC02ZmM4NjZkZjU2LXRtdnNzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWM3NDc1NS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1jNzQ3NTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.61~e2e-shared-b-c74755-openshift-default-6fc866df56-tmvss.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1"},"host":"e2e-shared-b-c74755.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","method":"POST","path":"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":835176363,"seconds":1785843319},"url_path":"/ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:44222","port":44222}}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c74755/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-39860d"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66b37ff2-6c7c-4797-93ac-32e916906c13","keyName":"e2e-rate-b-39860d","selected_subscription":"e2e-rate-iso-b-39860d","selected_subscription_key":"ai-tenant-e2e-shared-b-c74755/e2e-rate-iso-b-39860d@ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-c74755/models/facebook/opt-125m","name":"rate-test-model-c74755","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-39860d","namespace":"ai-tenant-e2e-shared-b-c74755","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c74755/rate-test-model-c74755"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd95b0d-e389-43f9-97ab-fcc2239d4aa1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b08d4d8e1604992fe1f86faec6be8049d4df40d261a18d0d62820cafbd87da7"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3423c3996b245dee8088b2d9decb7fc9ecf5dc95de969a1df88ad91cacddfbf4"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0921660703d11ad7ab0ca23c21720fd83852b20ebe0b8cf5ea8107c96690e014"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2a08d04be6fdca7616c22c1e3d8a626d19637e182c0552c6b98ebfcebcfa18c"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4399ed3ced133cf33630700e357bc3b4f9f1296a98b8983ca85deeb63ef519fa"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/247b7caa32f55749281eb449428ed716f369124409aba11241bc07406798045a"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dce71417fb33c7e2880aac413cb82a870f97d1c49e6f166707833ba4a2f846c8"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb1145b3bff77b358c26ec7ea318eb8602bbd158dd7db00282a11ab4f2d20ef"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a876a87aacc6b578a48e4f868826ba2a4b5fcb19d0ecf300428b490d8574ed84"}
{"level":"info","ts":"2026-08-04T11:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/debf7d50023dea2145c88e01b6272fa08ec639c198c04e8975a7f09294fde640"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14cd9e22d0d367b09b2e33105185be83b5f3b4e408738dd74d6f607f83502182"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac7b6a6a62f34b59f8ca12e05f4dc44129dcfd5016777f0bdf23369b7fdb19e5"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/510e052a8814ce2eaa9b9d7f95a30679b399a2fb4d4dbaf40f670b2a73b6070f"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd24a450476079097a50059a587f6a4595b9b0411f106eec90ad1196fa6af0fe"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9c0cebc693918729d710637d8d536520e3db8e7c8e305b9f48d72b0bd9a939a"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ac0d6a4ac570c83e85e56046b65a605631ea3cd1177b15d1f0e63af268f3412"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dc6a0bf9eca036d05d37ed596fd8c298789fa54ec1e5b2c808b60cb989d09bc"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/443ade777eb25929e587ab0db0811276623329aaeef8d0e536c1488796f07e60"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce4b4c4ef83bc7c746cb7e11883ac320455d81b504ef6ecd6edb712e516c7b49"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24333c5299f4c2de549a7f499dfee6da8b4f5a9597546e3f589b4518d0d0c3a1"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b195bf820b882f8cf29170b87f056f62e59a02a41ca995ed7f8bb6cb8afe45f"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/158936c2aa87cce5d07fafa0027573ef85f5331e68e3691e54d7e6eddfbc1874"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f055d34e7a47ed6aff58e77b09a3a6ba7db0d270fa89ef8a3cdccf4d173ffc67"}
{"level":"info","ts":"2026-08-04T11:35:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5524afca57290f0484e89509fe245efa8332d53f7d4889cd5c2d7dce4cab2117"}
{"level":"info","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34162","PortSpecifier":{"PortValue":34162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b2cb978-e002-4c92-bd42-20df57a5be10","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","object":"source:{address:{socket_address:{address:\"10.133.0.9:34162\"  port_value:34162}}}  destination:{address:{socket_address:{address:\"10.132.0.27:443\"  port_value:443}}}  request:{time:{seconds:1785843388  nanos:745983235}  http:{id:\"2b2cb978-e002-4c92-bd42-20df57a5be10\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"2b2cb978-e002-4c92-bd42-20df57a5be10\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b2cb978-e002-4c92-bd42-20df57a5be10"},"host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"2b2cb978-e002-4c92-bd42-20df57a5be10","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":745983235,"seconds":1785843388}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34162},"address":"10.133.0.9:34162"}}}}},"destination":{"address":"10.132.0.27:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2b2cb978-e002-4c92-bd42-20df57a5be10"},"host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"2b2cb978-e002-4c92-bd42-20df57a5be10","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":745983235,"seconds":1785843388},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:34162","port":34162}}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b2cb978-e002-4c92-bd42-20df57a5be10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34168","PortSpecifier":{"PortValue":34168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.27:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","object":"source:{address:{socket_address:{address:\"10.133.0.9:34168\"  port_value:34168}}}  destination:{address:{socket_address:{address:\"10.132.0.27:443\"  port_value:443}}}  request:{time:{seconds:1785843388  nanos:798226304}  http:{id:\"3571d278-f7bf-4e20-9849-212bdfae0bc6\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWRkOXJiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"3571d278-f7bf-4e20-9849-212bdfae0bc6\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5OsVzkuIchwmj78A_CJdD03DnIzbMOt3XHxeuIAlAkBSib0QkuGJxpQEtJM0"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1cdc373-8d8d-43c3-b911-631039c0320c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"a1cdc373-8d8d-43c3-b911-631039c0320c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.27:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3571d278-f7bf-4e20-9849-212bdfae0bc6"},"host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":798226304,"seconds":1785843388}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34168},"address":"10.133.0.9:34168"}}}}},"destination":{"address":"10.132.0.27:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.27~maas-default-gateway-openshift-default-5ccb968c66-dd9rb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3571d278-f7bf-4e20-9849-212bdfae0bc6"},"host":"maas.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":798226304,"seconds":1785843388},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:34168","port":34168}}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1cdc373-8d8d-43c3-b911-631039c0320c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:36:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3571d278-f7bf-4e20-9849-212bdfae0bc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41"}
{"level":"error","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"}
{"level":"info","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T11:36:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817"}
{"level":"info","ts":"2026-08-04T11:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6"}
{"level":"info","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36510","PortSpecifier":{"PortValue":36510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"051b3c75-dd0a-46af-bae8-accf5085015f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","object":"source:{address:{socket_address:{address:\"10.133.0.9:36510\"  port_value:36510}}}  destination:{address:{socket_address:{address:\"10.132.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785843431  nanos:642061862}  http:{id:\"051b3c75-dd0a-46af-bae8-accf5085015f\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"051b3c75-dd0a-46af-bae8-accf5085015f\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3c1a239b8788"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de8b0e75-08d0-4cad-bfbe-9d07bcce04a5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b9ccc82c-8ed9-44f4-aa36-86afea5395f5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1lNDQ0MzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWU0NDQzMS1vcGVuc2hpZnQtZGVmYXVsdC03OWZkNDVmNTY0LXFocmNrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWU0NDQzMS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1lNDQ0MzEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"051b3c75-dd0a-46af-bae8-accf5085015f"},"host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"051b3c75-dd0a-46af-bae8-accf5085015f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":642061862,"seconds":1785843431}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36510},"address":"10.133.0.9:36510"}}}}},"destination":{"address":"10.132.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"},"headers":{":authority":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"051b3c75-dd0a-46af-bae8-accf5085015f"},"host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"051b3c75-dd0a-46af-bae8-accf5085015f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":642061862,"seconds":1785843431},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:36510","port":36510}}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-e44431/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:37:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"051b3c75-dd0a-46af-bae8-accf5085015f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36524","PortSpecifier":{"PortValue":36524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","method":"POST","path":"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions","host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","object":"source:{address:{socket_address:{address:\"10.133.0.9:36524\"  port_value:36524}}}  destination:{address:{socket_address:{address:\"10.132.0.67:443\"  port_value:443}}}  request:{time:{seconds:1785843433  nanos:706330583}  http:{id:\"e20f2ee1-6fba-4a4b-a207-b0948d145a2d\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-e44431-kserve-workload-svc.ai-tenant-e2e-ipp-a-e44431.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.133.0.9\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1lNDQ0MzEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWU0NDQzMS1vcGVuc2hpZnQtZGVmYXVsdC03OWZkNDVmNTY0LXFocmNrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWU0NDQzMS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1lNDQ0MzEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.133.0.9\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"e20f2ee1-6fba-4a4b-a207-b0948d145a2d\"}  path:\"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions\"  host:\"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UYrohfsFBvm7yJaw_2NxgWKcsmdWLhNX4e13knyWPs7v72jvVYqSHjcJW3oP"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5cb7094e-49dd-4fc7-b565-b21ac430b55b","keyName":"e2e-ipp-e44431","subscription":"ipp-route-e44431-sub","tenant":"e2e-ipp-a-e44431","userId":"5cb7094e-49dd-4fc7-b565-b21ac430b55b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-e44431.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-e44431/models/facebook/opt-125m","name":"ipp-route-e44431","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-e44431-sub","namespace":"ai-tenant-e2e-ipp-a-e44431","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431"}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-e44431-kserve-workload-svc.ai-tenant-e2e-ipp-a-e44431.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d"},"host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","method":"POST","path":"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":706330583,"seconds":1785843433}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36524},"address":"10.133.0.9:36524"}}}}},"destination":{"address":"10.132.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"},"headers":{":authority":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-e44431-kserve-workload-svc.ai-tenant-e2e-ipp-a-e44431.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-e44431-openshift-default-79fd45f564-qhrck.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.9","x-forwarded-host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d"},"host":"e2e-ipp-a-e44431.apps.352260f7-acbd-454f-ab30-3c1a239b8788.prod.konfluxeaas.com","id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","method":"POST","path":"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":706330583,"seconds":1785843433},"url_path":"/ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.9:36524","port":36524}}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-e44431/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-e44431-sub"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5cb7094e-49dd-4fc7-b565-b21ac430b55b","keyName":"e2e-ipp-e44431","selected_subscription":"ipp-route-e44431-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431-sub@ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-e44431/models/facebook/opt-125m","name":"ipp-route-e44431","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-e44431-sub","namespace":"ai-tenant-e2e-ipp-a-e44431","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-e44431/ipp-route-e44431"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-04T11:37:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20f2ee1-6fba-4a4b-a207-b0948d145a2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-04T11:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7c14ec19bd3606c4e345d93f587c22e0a70b4f944b69a2309edbbd68ed7f4c4"}
{"level":"info","ts":"2026-08-04T11:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c27448cdd688bc02473812f7bf07ce1b11d1ff6c4de3b2a3d04bd307cb5d13e4"}
{"level":"info","ts":"2026-08-04T11:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a681e54ac56be3d34b60a5f1db8c4cbdc61794ffc984c307b1e9e4045c3b41"}
{"level":"info","ts":"2026-08-04T11:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0fdc4ab6b947e4efc89b9357367efcfc0ba6c63d2f348708a77f2337d8af4a4"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1bebc00868cb8414d1bfbd946ed52db4b656c2903463864f9139a5696310aef"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712a4367f03db602b8343dc97d35dbd0ec1ae00f1be4303d4a8a8179c337158e"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/537a82542f18e278c2253eadc83d84714befffc8f45bec51332a9907c001c05f"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bcbce4d82aa24f80767014ad0868c9d1a55a41fcbb9ce3256a5ffec1da54dd6"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2699fe5664a9b6781a14a70bac951bbb3ec65ab19692eb6d49998eef5727098"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6903571db9f1580e22d85b70a223c05584aa4cf990c53d312fe16e0ab3a9e817"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb58e613b55d19c5099e437c906c460065010c6c61d5789c11a56ea39eda27cc"}
{"level":"info","ts":"2026-08-04T11:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27670431c56bcc8ffdbb40cf2d32cd637b184dee25ae01305df3589c0354e78"}