{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T22:00:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"debug","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:00:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35304","PortSpecifier":{"PortValue":35304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":496142315},"http":{"id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c673c4d7-9b11-4ac1-942b-ecfc7ea5035d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32902","PortSpecifier":{"PortValue":32902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab35bd6-a283-4f26-b123-25695e883a51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:32902","PortSpecifier":{"PortValue":32902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":542083303},"http":{"id":"6ab35bd6-a283-4f26-b123-25695e883a51","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab35bd6-a283-4f26-b123-25695e883a51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35312","PortSpecifier":{"PortValue":35312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375225,"nanos":588585063},"http":{"id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fa0f8a8-a47d-435b-9220-0e32364036e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35324","PortSpecifier":{"PortValue":35324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375226,"nanos":658073292},"http":{"id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a018f40-5fb8-4430-a8f6-3a21da4ff4a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375227,"nanos":693273605},"http":{"id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EdK07igHplYWYsXF_BiFaCEXerpmL2lpcij9vGVA5tIU3oO2CWAe9goHFgw7\"}"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","subscription":"e2e-rate-iso-a-7252c3","tenant":"e2e-shared-a-ace6c2","userId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-7252c3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7252c3"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97cfbeac-28fb-4cb4-9ad9-d0bb88e33026","keyName":"e2e-rate-a-7252c3","selected_subscription":"e2e-rate-iso-a-7252c3","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-7252c3@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7252c3","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc2b0e8-b1f5-4bee-8f3a-22f77eb6d325","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34930","PortSpecifier":{"PortValue":34930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":456780560},"http":{"id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4c74d50-2d43-4d05-8495-8d5aaaf22c82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:59160","PortSpecifier":{"PortValue":59160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:59160","PortSpecifier":{"PortValue":59160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":496266631},"http":{"id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"]}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fa43f778da09"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b53bc07a-ff55-4f70-9970-23c4ef7a53fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b18bcd0d-0ddc-453a-a219-e5b918a714c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1fd50c9-81c8-44b1-aff7-29efd50864e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0694abf1-a3ce-434d-9182-558548e319cd","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34938","PortSpecifier":{"PortValue":34938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375238,"nanos":534711656},"http":{"id":"0694abf1-a3ce-434d-9182-558548e319cd","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0694abf1-a3ce-434d-9182-558548e319cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0694abf1-a3ce-434d-9182-558548e319cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0694abf1-a3ce-434d-9182-558548e319cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0694abf1-a3ce-434d-9182-558548e319cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375239,"nanos":578052245},"http":{"id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"711a77f1-58ea-91a4-97b6-29b44f4497eb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36650","PortSpecifier":{"PortValue":36650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"808973c8-a44c-4ed2-aafb-d2788e125124","method":"POST","path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions","host":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36650","PortSpecifier":{"PortValue":36650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375240,"nanos":616252530},"http":{"id":"808973c8-a44c-4ed2-aafb-d2788e125124","method":"POST","headers":{":authority":"e2e-shared-a-ace6c2.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T5Y4Le1s6Kkh2Svr_cCCJxWw1Gl6ttp013brxJHI6GBeC21lshmUEkwquouT\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","subscription":"e2e-rate-iso-a-07802e","tenant":"e2e-shared-a-ace6c2","userId":"a5374c24-2c69-4536-9f74-0f085085664e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\",\"requestedSubscription\":\"e2e-rate-iso-a-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ace6c2.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a5374c24-2c69-4536-9f74-0f085085664e","keyName":"e2e-rate-a-07802e","selected_subscription":"e2e-rate-iso-a-07802e","selected_subscription_key":"ai-tenant-e2e-shared-a-ace6c2/e2e-rate-iso-a-07802e@ai-tenant-e2e-shared-a-ace6c2/rate-test-model-ace6c2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ace6c2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-07802e","namespace":"ai-tenant-e2e-shared-a-ace6c2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"808973c8-a44c-4ed2-aafb-d2788e125124","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c012bd3a-b6a4-4281-8122-a50999597bac","method":"POST","path":"/ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3/v1/completions","host":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55506","PortSpecifier":{"PortValue":55506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783375240,"nanos":649412820},"http":{"id":"c012bd3a-b6a4-4281-8122-a50999597bac","method":"POST","headers":{":authority":"e2e-shared-b-d392e3.apps.a599f2e2-08bd-4f1a-8873-fa43f778da09.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AlX3sf0nOgBd0Ey2_jzNmdBdPw47fAXnbV3kPiV0FGONF0hBjUnUYrCb4q27"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AlX3sf0nOgBd0Ey2_jzNmdBdPw47fAXnbV3kPiV0FGONF0hBjUnUYrCb4q27\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"466accd6-6fc6-43d9-9320-f70321cdce2d","keyName":"e2e-rate-b-07802e","subscription":"e2e-rate-iso-b-07802e","tenant":"e2e-shared-b-d392e3","userId":"466accd6-6fc6-43d9-9320-f70321cdce2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\",\"requestedSubscription\":\"e2e-rate-iso-b-07802e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d392e3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d392e3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-07802e","namespace":"ai-tenant-e2e-shared-b-d392e3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-07802e"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"466accd6-6fc6-43d9-9320-f70321cdce2d","keyName":"e2e-rate-b-07802e","selected_subscription":"e2e-rate-iso-b-07802e","selected_subscription_key":"ai-tenant-e2e-shared-b-d392e3/e2e-rate-iso-b-07802e@ai-tenant-e2e-shared-b-d392e3/rate-test-model-d392e3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d392e3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-07802e","namespace":"ai-tenant-e2e-shared-b-d392e3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:00:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c012bd3a-b6a4-4281-8122-a50999597bac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51a7064688f08bb4daa1fda0f9169dd843265e08c47a91328fed48723fce236"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3971df4fae438695ea9758dbd5a21bf5a368cf31e2d1d3364f40bb4e0849e782"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e10bb5dda9442eed009f8a5b3934ed631a07169c6987b84827c687f1b79faf3c"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7e175f776eaf7e5a10e77fb066a22dd1ed7b559d74fda0db1733d1ca24b15c"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b5e8758c227f0a5bf12d219139a920bdd478e5d4b94232c988f1734c32a68d"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5eab703ee746c16459b698c6d04d11e996f72b23a8c5bf12307ccb7f4a870eee"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c83346255d8f6bcb471646168e1762e60679d344f2463d49ca026fd2c681e08"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae6d0d460f683bbf5133d9c920e26e2d58515d9b62b59e2899e219a0b1bec79"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f1ad04c9871850d201691e244032ec06dfe9a89105f3de1b12dfd78f900549b"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d2f4a4228ca7fc8aee5878d8508d9ad6b36419683fb2c36c64ee365cffdf3a2"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07eb11db53002734106c6e29d2ef34950cb2edf9a3f978b31b16578084d41e74"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/459f7d578fb64b7ee137af0d54519e33d6ff65b4c6fdc2fd1d0c5407a9b0dace"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afee259a8ba96094752374860f22fb79d61f3d5faee506a16d35dd1eab191595"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee54dd0a7458f89122fad101f00f579a1c5105871073078d0ff01074f24e05e"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a94c66c53233f16bc00731ed4216898d6d46327b465bf5eb7e37317601219974"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ba4e2d8c4253a62754d53c87c7eb02f7afcf9642d10c7eaf2d85a337eb5cf5"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8beecdd8bd2ded1174f1fc0f8e8bc5c76a39d100c84959e6f14a1e798780e86"}
{"level":"info","ts":"2026-07-06T22:00:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e1822fd60169e73fb874966417c50a2178663c422474c0df7cc3642ef806ee"}
{"level":"info","ts":"2026-07-06T22:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49f0af17d7ee867ed33e510bebd52ca61626bddea925691b103088077ff73670"}
{"level":"info","ts":"2026-07-06T22:01:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b968c88bda77ce95afb2c65c523b86f077d7b01db78b45e10d0907d346c401ed"}