{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"error","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T04:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"}
{"level":"error","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"debug","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"}
{"level":"info","ts":"2026-07-10T04:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48826","PortSpecifier":{"PortValue":48826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":237467939},"http":{"id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c66fdea9-47f6-4f98-bac4-c87ce1c4bf3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39898","PortSpecifier":{"PortValue":39898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39898","PortSpecifier":{"PortValue":39898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":279241896},"http":{"id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75699273-6b9c-4cba-bdb2-12aedbe77f41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48834","PortSpecifier":{"PortValue":48834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4407efa-63e8-4237-a96b-f4df4724cb70","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48834","PortSpecifier":{"PortValue":48834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657128,"nanos":322360645},"http":{"id":"f4407efa-63e8-4237-a96b-f4df4724cb70","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:18:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4407efa-63e8-4237-a96b-f4df4724cb70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6c48b73-5509-411c-95b1-d239fd513147","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48838","PortSpecifier":{"PortValue":48838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657129,"nanos":388019977},"http":{"id":"d6c48b73-5509-411c-95b1-d239fd513147","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6c48b73-5509-411c-95b1-d239fd513147","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6c48b73-5509-411c-95b1-d239fd513147","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6c48b73-5509-411c-95b1-d239fd513147","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:18:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6c48b73-5509-411c-95b1-d239fd513147","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657130,"nanos":445613162},"http":{"id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zfFHeGlH90lwUtcg_HImSuV5hirELUCpojtEi9qPz0XKFhY3qw0HeJvb5bEq\"}"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","subscription":"e2e-rate-iso-a-26c9b2","tenant":"e2e-shared-a-937cca","userId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-26c9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-26c9b2"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f99f2421-2f75-4f4c-9453-5bce0bcb0c16","keyName":"e2e-rate-a-26c9b2","selected_subscription":"e2e-rate-iso-a-26c9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-26c9b2@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-26c9b2","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:18:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0720d885-861f-41b2-8f37-ebcb7fd7dc0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57930","PortSpecifier":{"PortValue":57930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":453835499},"http":{"id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.83:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bd516a7-14a0-4369-a643-6d34d17a50ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52102","PortSpecifier":{"PortValue":52102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52102","PortSpecifier":{"PortValue":52102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":491656630},"http":{"id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"721bb24e-a16e-43f2-b845-9c488f39e616","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"]}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8eba1b6bb544"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e0fecf6-375a-40d7-b42c-b9b133ac84f8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"721bb24e-a16e-43f2-b845-9c488f39e616","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d523f08d-f4f1-4d3a-9f9c-b32b3882c894","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17652217-5e60-4502-af8e-fa780e239b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57940","PortSpecifier":{"PortValue":57940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17652217-5e60-4502-af8e-fa780e239b77","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17652217-5e60-4502-af8e-fa780e239b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57940","PortSpecifier":{"PortValue":57940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657143,"nanos":546424509},"http":{"id":"17652217-5e60-4502-af8e-fa780e239b77","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17652217-5e60-4502-af8e-fa780e239b77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17652217-5e60-4502-af8e-fa780e239b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17652217-5e60-4502-af8e-fa780e239b77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17652217-5e60-4502-af8e-fa780e239b77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57948","PortSpecifier":{"PortValue":57948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657144,"nanos":592354140},"http":{"id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7abfca-628c-4c7c-8133-3968da3dc00c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","method":"POST","path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions","host":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57954","PortSpecifier":{"PortValue":57954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.83:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657145,"nanos":632192166},"http":{"id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","method":"POST","headers":{":authority":"e2e-shared-a-937cca.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QyIfpfc0P0isa3Oo_l5Gi8FHlDfPOS39qOJJRv89o5dIypnPSrVEoA6jJInC\"}"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","subscription":"e2e-rate-iso-a-8f0604","tenant":"e2e-shared-a-937cca","userId":"49a933e5-9860-4894-bd0a-e08d6a199e13","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\",\"requestedSubscription\":\"e2e-rate-iso-a-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-937cca.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8f0604"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"49a933e5-9860-4894-bd0a-e08d6a199e13","keyName":"e2e-rate-a-8f0604","selected_subscription":"e2e-rate-iso-a-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-a-937cca/e2e-rate-iso-a-8f0604@ai-tenant-e2e-shared-a-937cca/rate-test-model-937cca","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-937cca","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8f0604","namespace":"ai-tenant-e2e-shared-a-937cca","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bac5b80-7ac7-4f1d-8476-a4c5e26e6545","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","method":"POST","path":"/ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb/v1/completions","host":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52104","PortSpecifier":{"PortValue":52104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783657145,"nanos":667642518},"http":{"id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","method":"POST","headers":{":authority":"e2e-shared-b-3505cb.apps.4f34b940-8e7d-469c-b8e9-8eba1b6bb544.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11DK5lzqMMlVLnuV8_DQ3eGb4J1AULJeGXxAonMc0aylUt3eq6yq41gULogvj"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11DK5lzqMMlVLnuV8_DQ3eGb4J1AULJeGXxAonMc0aylUt3eq6yq41gULogvj\"}"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","keyName":"e2e-rate-b-8f0604","subscription":"e2e-rate-iso-b-8f0604","tenant":"e2e-shared-b-3505cb","userId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\",\"requestedSubscription\":\"e2e-rate-iso-b-8f0604\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3505cb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3505cb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8f0604","namespace":"ai-tenant-e2e-shared-b-3505cb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8f0604"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed01c7ae-e0b1-45df-b638-e79208a55e2a","keyName":"e2e-rate-b-8f0604","selected_subscription":"e2e-rate-iso-b-8f0604","selected_subscription_key":"ai-tenant-e2e-shared-b-3505cb/e2e-rate-iso-b-8f0604@ai-tenant-e2e-shared-b-3505cb/rate-test-model-3505cb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3505cb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8f0604","namespace":"ai-tenant-e2e-shared-b-3505cb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T04:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a7c5c3-db2f-4662-9cfc-5652314923f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6856844804949ce8bf686f6745b7f094bb7913b0833486004107ee3895e13b5"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a124b6521db6f1b4242bfef627a38674ab4d26b47a10f2e4cd1100b49c5dbd58"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ed32cec0084fbbd62ae896bccd7a16b7d90486b99eafe7c094c962e65d42546"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/409d497ab19bf4116a9aafc3d610247737bbf06bf0aa28ffe4280cc5ee2b1a29"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c35f4b6538136671f6ed19bde9d51aa44408070e14788d83c62eed4c4536c45"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/510f712f6873ec001c771c22d3b0d253fb71c3e267d9bac224a027b6e716a8fb"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8fbf242a3a68c282243f4f40cdc4053a9aed9a5f111b88ad28f69c216fb60bb"}
{"level":"info","ts":"2026-07-10T04:19:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd8edac1735d68b509c39b9b80f1c222d55e7ce63d79a860cb5e8e9095cba4b5"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62b2bae59a317c253843d0819fe3c3615af2a1095f9c6e43024807a5784833e1"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f22d479de5846032b9a76c657f97834935801201cefa816099ee8204171ae902"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b5af7adfb9efc659f99e0ae231ffbaf610f874194678da39287659c1c01efcb"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f95985c7197c3d4a335d15046dfa287c2d3b1d2ad1b55907afa8a27c8ecbd6e"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdd05c6cd3f513439aa43c8df363b38695280ce350b550c68ad3c97838992399"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ff954a487a0bbd3f44ccb4bcd71613a57f7f4da27131a5690fc98b15741a662"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e6fed6dff33177f71a10875a7dfcabd31b9c3569a8e2411b29c96fca2fdbd62"}
{"level":"info","ts":"2026-07-10T04:19:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d488b4edb45138646e41b9bda0de3e6ef588ce236806310bb234daec4da4077"}
{"level":"info","ts":"2026-07-10T04:19:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1f1e1ae6ee0f9f95ff5ec82a3b9ffeffa1ac244d4a2f9515816e9e304d79259"}
{"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ccfc5e7a65158e1a6f12cacb96feeabd7b3a2a34ea8832154b0e7349df3ac9"}
{"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e169718caaa00dbcec8e2fe468d10db5966660c871419cb7ee605c526aed9caf"}
{"level":"info","ts":"2026-07-10T04:19:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/119d5d1a545d4817fcda8cd8420f01f9fbfdc269e5b5ef5fc8102e0f7fd5dfe6"}
{"level":"info","ts":"2026-07-10T04:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84cacd6932bcc848945a2f5ae8c83185d3c82fc1129d6b9862bee026ab4f5663"}
{"level":"info","ts":"2026-07-10T04:20:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e36baf5b68336d6d4d903a5dc69c8c72feab224a4df7ff16f7759565cdc3933e"}
{"level":"info","ts":"2026-07-10T04:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c2f7de887f3f674e8ca162bf2f7cd64f8730e7b24e2ab0190bcea449a9463c6"}
{"level":"info","ts":"2026-07-10T04:20:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e18c0196e53cba65807f3c3cfc72d742a6a30e3520295fe4497e82cf42ce11b"}