{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"debug","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"info","ts":"2026-07-14T22:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T22:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"debug","ts":"2026-07-14T22:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"}
{"level":"debug","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3"}
{"level":"info","ts":"2026-07-14T22:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59220","PortSpecifier":{"PortValue":59220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"797cd67c-f42e-48f3-a8f5-4db346804870","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59220","PortSpecifier":{"PortValue":59220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":866305944},"http":{"id":"797cd67c-f42e-48f3-a8f5-4db346804870","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"797cd67c-f42e-48f3-a8f5-4db346804870","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40002","PortSpecifier":{"PortValue":40002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40002","PortSpecifier":{"PortValue":40002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":905570648},"http":{"id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4b764e3-5218-431a-8d75-2141dd1e04f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b09101d-efa8-41ea-847a-551827b89031","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b09101d-efa8-41ea-847a-551827b89031","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b09101d-efa8-41ea-847a-551827b89031","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068627,"nanos":942358535},"http":{"id":"1b09101d-efa8-41ea-847a-551827b89031","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b09101d-efa8-41ea-847a-551827b89031","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b09101d-efa8-41ea-847a-551827b89031","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b09101d-efa8-41ea-847a-551827b89031","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b09101d-efa8-41ea-847a-551827b89031","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59236","PortSpecifier":{"PortValue":59236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068628,"nanos":993738835},"http":{"id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e257e90-23f0-4d9b-a0fd-2f92aa1a5d38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59244","PortSpecifier":{"PortValue":59244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59244","PortSpecifier":{"PortValue":59244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068630,"nanos":33295660},"http":{"id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iWiUeYb7JJbPFXx7_IEhIJOGrRO7FoQYNF9hZuzemR9usw8Dxns8x5ricmS1\"}"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","subscription":"e2e-rate-iso-a-6a49d2","tenant":"e2e-shared-a-fdfd38","userId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-6a49d2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6a49d2"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b6b55e5e-75fb-4637-9a68-b8b3f6348e04","keyName":"e2e-rate-a-6a49d2","selected_subscription":"e2e-rate-iso-a-6a49d2","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-6a49d2@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6a49d2","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0c9311a-721d-49b1-9c5d-be63c4e13fb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60226","PortSpecifier":{"PortValue":60226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60226","PortSpecifier":{"PortValue":60226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068642,"nanos":913351975},"http":{"id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f9cbc68-e70d-4554-ae36-f0cafe48c7be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f732aaf-0337-438a-b000-f33ff58eb653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43950","PortSpecifier":{"PortValue":43950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068642,"nanos":961420048},"http":{"id":"2f732aaf-0337-438a-b000-f33ff58eb653","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"]}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fbc38326ac53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fb5cb208-bd2c-44d2-9574-b977aa5380f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b04efcc2-dce4-4186-8c21-e350ea3432d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f732aaf-0337-438a-b000-f33ff58eb653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068643,"nanos":2761727},"http":{"id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee2409c-59ca-40ae-b9ad-aaf8caf8866e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3468451c-af73-4cc0-b395-fe381565bbdd","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60244","PortSpecifier":{"PortValue":60244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068644,"nanos":40883011},"http":{"id":"3468451c-af73-4cc0-b395-fe381565bbdd","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3468451c-af73-4cc0-b395-fe381565bbdd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","method":"POST","path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions","host":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068645,"nanos":83167053},"http":{"id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","method":"POST","headers":{":authority":"e2e-shared-a-fdfd38.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cy66ogKTfud2y2Uc_o30HQ1sS6lOHI2fvJ7DJK4wh1KP23HpVavNAfPtV2YV\"}"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","subscription":"e2e-rate-iso-a-d8d660","tenant":"e2e-shared-a-fdfd38","userId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fdfd38.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fdfd38/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d660"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"91d92d1b-f3d2-47f8-9ffe-cbfef3895bd8","keyName":"e2e-rate-a-d8d660","selected_subscription":"e2e-rate-iso-a-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-a-fdfd38/e2e-rate-iso-a-d8d660@ai-tenant-e2e-shared-a-fdfd38/rate-test-model-fdfd38","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fdfd38","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d660","namespace":"ai-tenant-e2e-shared-a-fdfd38","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a713ec8-a32b-4d92-a61c-e8464a4b4e98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43964","PortSpecifier":{"PortValue":43964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","method":"POST","path":"/ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3/v1/completions","host":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43964","PortSpecifier":{"PortValue":43964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784068645,"nanos":122085162},"http":{"id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","method":"POST","headers":{":authority":"e2e-shared-b-32d7b3.apps.38a83545-0e75-4721-bc32-fbc38326ac53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VwqQJHBxcSe5Mxw5_pijC29XB2mKsGiacBVoKcM2KN37NeLBGUCyiagyErCk"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VwqQJHBxcSe5Mxw5_pijC29XB2mKsGiacBVoKcM2KN37NeLBGUCyiagyErCk\"}"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9167015-0269-4987-b321-98ce8981c12a","keyName":"e2e-rate-b-d8d660","subscription":"e2e-rate-iso-b-d8d660","tenant":"e2e-shared-b-32d7b3","userId":"a9167015-0269-4987-b321-98ce8981c12a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\",\"requestedSubscription\":\"e2e-rate-iso-b-d8d660\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-32d7b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-32d7b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d8d660","namespace":"ai-tenant-e2e-shared-b-32d7b3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-32d7b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d8d660"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9167015-0269-4987-b321-98ce8981c12a","keyName":"e2e-rate-b-d8d660","selected_subscription":"e2e-rate-iso-b-d8d660","selected_subscription_key":"ai-tenant-e2e-shared-b-32d7b3/e2e-rate-iso-b-d8d660@ai-tenant-e2e-shared-b-32d7b3/rate-test-model-32d7b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-32d7b3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d8d660","namespace":"ai-tenant-e2e-shared-b-32d7b3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T22:37:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"549ba62d-5972-466b-a3d5-af6b3d5b1b4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107bd925e9a65682dbec789ca4a39279bba153f85f8d6d5c5b60b8572eeb5983"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9cea88dbd6a0776c9c7d206e149b5a55f48580cdf2325d28f930fe7a8433df7"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5e9274cb98c9c8338de6b74d9140407597fcd78d8b8c02f527a2e3a842c7656"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a478bfb45a1dd1a9ad018e3961e88d0fa385bb64d3556b6c7d22ed6491c693f"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f66d2d8ebd5f2a5e1a1bdb489537bf29ab1b75e53d47ef10302969650604ff08"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1ab70a72b3b64d72710f4401a231c81f59621becf0da394cf64f2e0849ed5e"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c140b17eacf20097b9e66fe7a74ca000940cfa265dae0c6739102ab9c54f1550"}
{"level":"info","ts":"2026-07-14T22:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02d8717a964e9cd2ada436858337185e46f2b7915c03b40f00b0f469c03045e0"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1002b3c000ff0e8a1faf0629b48815daedfcadc7e0539774b60088a91c396e1d"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77507ee6df3898a012f64deee433fe1ce49e6516c0bac3fe2bd803ddf5ccb55e"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/324662815ba0030be25f16923c6279b711cb59e39e9b1a8f0ba4bf4ab1e11903"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7c07c96a25242e2657549fa768032b259a0e2010d7842a03c0fbc378f8598a1"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c2d52f0188354885eafe7dc8c6ad392bb9f24d8612ecccbfb4cacb1def7a2a0"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff9accb4031436d15af1103644998e8c91f863af5627f7cd619fedd24703616"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/394f8afcc40dd20a5ce199c060f05b5199b7f800d7e0d29a5f0ed9272eb4c561"}
{"level":"info","ts":"2026-07-14T22:37:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7218330e5a7d0cc53e2e42dffc0ee7aab7d1a31e56e7666ef6ef36d960168bbd"}
{"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a72d12ba8d11b0bde652d011a01f256eb891a0f3693d8755f65dc7be3f4b9b3"}
{"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3143c4d21cb8c0f8140a213a0830f34f6dfc4381d0e706987953ff2a3b9f1f51"}
{"level":"info","ts":"2026-07-14T22:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b42a40cbae99186ff38d1c3378b7da2c802a5d8e6c8eee6b41836d768f9689a2"}
{"level":"info","ts":"2026-07-14T22:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3978c93272d2264b60e9214c48a5e1fb446e41cab9740f0c0a07bc1714d22da"}
{"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e91974235f01a949ba6896018e788dc5b8de4aa1ba75503068d6d4cac2f7737"}
{"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2ded2754aa45d04f546d11f6ef2fa767d212141fd37bcbd805c3a855f4be7e"}
{"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4b470f23959586103fe03d0dfd45f550ebe39f595a441135d7f0f3ffc85be63"}
{"level":"info","ts":"2026-07-14T22:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27ae872ef0b9fa5b8903606a2ed991913c05e2831864f59802584adbe8a7f773"}