{"level":"info","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8436e25b-c513-46fb-824b-f8ccd93d3264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832442,"nanos":825927082},"http":{"id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RTQ9azvrHXNdROZg_boBDmA3ufhelD1EMTd6xItVovxa5IC2f3gxZJpXUuaZ\"}"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","subscription":"e2e-rate-iso-a-3d1c33","tenant":"e2e-shared-a-5f06b1","userId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-3d1c33\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3d1c33"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ed5dd021-2302-4dff-bb76-e77560eda8d0","keyName":"e2e-rate-a-3d1c33","selected_subscription":"e2e-rate-iso-a-3d1c33","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-3d1c33@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3d1c33","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ee002f0-bc15-48e8-a8bb-5744c20dd579","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"}
{"level":"info","ts":"2026-07-23T18:47:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"error","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"error","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T18:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"error","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T18:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41466","PortSpecifier":{"PortValue":41466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":148496177},"http":{"id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc27a714-0e91-4bae-8726-1f92036b0ed9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76860613-de23-4cbd-97d6-ab1e8d703a25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50752","PortSpecifier":{"PortValue":50752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":191527079},"http":{"id":"76860613-de23-4cbd-97d6-ab1e8d703a25","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"]}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd6c3f1cc7ee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=586861df-a8fc-472d-b6ad-1e622aed0309"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8b3fe1af-8789-42be-bd7f-789e849f3fb1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76860613-de23-4cbd-97d6-ab1e8d703a25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41470","PortSpecifier":{"PortValue":41470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41470","PortSpecifier":{"PortValue":41470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832460,"nanos":230261791},"http":{"id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b4229-e1a1-4f32-9e03-b40e52c004b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41478","PortSpecifier":{"PortValue":41478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832461,"nanos":269252083},"http":{"id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7724ab9a-7eda-435e-97ce-7612287f3aeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"685659ce-af1d-47fb-b428-b0dba5921d90","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41482","PortSpecifier":{"PortValue":41482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832462,"nanos":311391794},"http":{"id":"685659ce-af1d-47fb-b428-b0dba5921d90","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"685659ce-af1d-47fb-b428-b0dba5921d90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f75a88b-613e-9f93-b671-7e466e1affd0","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41496","PortSpecifier":{"PortValue":41496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832463,"nanos":348467167},"http":{"id":"2f75a88b-613e-9f93-b671-7e466e1affd0","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f75a88b-613e-9f93-b671-7e466e1affd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41500","PortSpecifier":{"PortValue":41500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832464,"nanos":391741231},"http":{"id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b1c4b41-793a-43b1-bbbe-cdd24d979f6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43b3d43d-5f3e-48b4-93de-a180abea4829","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832465,"nanos":432203390},"http":{"id":"43b3d43d-5f3e-48b4-93de-a180abea4829","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b3d43d-5f3e-48b4-93de-a180abea4829","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41528","PortSpecifier":{"PortValue":41528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89a63f58-5bde-44af-ba75-19253898cb77","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41528","PortSpecifier":{"PortValue":41528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832466,"nanos":473468206},"http":{"id":"89a63f58-5bde-44af-ba75-19253898cb77","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89a63f58-5bde-44af-ba75-19253898cb77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89a63f58-5bde-44af-ba75-19253898cb77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89a63f58-5bde-44af-ba75-19253898cb77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89a63f58-5bde-44af-ba75-19253898cb77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41540","PortSpecifier":{"PortValue":41540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832467,"nanos":509864404},"http":{"id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe52a057-3e17-47b5-a0ab-427c2fafc893","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","method":"POST","path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions","host":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832468,"nanos":549064232},"http":{"id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","method":"POST","headers":{":authority":"e2e-shared-a-5f06b1.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-A0SqNBoDmjCw69sZ_GsfbLg9sUMy6vtTtmTncR39eJMC5GJBkrdrgIeqQKxL\"}"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","subscription":"e2e-rate-iso-a-d16ab9","tenant":"e2e-shared-a-5f06b1","userId":"984e4f0a-81eb-4869-b961-425aa02592ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\",\"requestedSubscription\":\"e2e-rate-iso-a-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f06b1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5f06b1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"984e4f0a-81eb-4869-b961-425aa02592ac","keyName":"e2e-rate-a-d16ab9","selected_subscription":"e2e-rate-iso-a-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-a-5f06b1/e2e-rate-iso-a-d16ab9@ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f06b1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d16ab9","namespace":"ai-tenant-e2e-shared-a-5f06b1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5f06b1/rate-test-model-5f06b1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1eb29f4-88d6-4baf-83b2-3908798cf581","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","method":"POST","path":"/ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985/v1/completions","host":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:45342","PortSpecifier":{"PortValue":45342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784832468,"nanos":586653284},"http":{"id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","method":"POST","headers":{":authority":"e2e-shared-b-8ee985.apps.b7f84942-ba45-4b53-833a-dd6c3f1cc7ee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LGp2xQHvoLK6C1bu_mK6TTml4EHrDbOiYf7xUGThUCLVUQJQ1B0S8kbSnV5v"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LGp2xQHvoLK6C1bu_mK6TTml4EHrDbOiYf7xUGThUCLVUQJQ1B0S8kbSnV5v\"}"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f6750df-fb52-42c0-b65e-3d72352e3437","keyName":"e2e-rate-b-d16ab9","subscription":"e2e-rate-iso-b-d16ab9","tenant":"e2e-shared-b-8ee985","userId":"5f6750df-fb52-42c0-b65e-3d72352e3437","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\",\"requestedSubscription\":\"e2e-rate-iso-b-d16ab9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8ee985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8ee985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d16ab9","namespace":"ai-tenant-e2e-shared-b-8ee985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985"}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8ee985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d16ab9"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f6750df-fb52-42c0-b65e-3d72352e3437","keyName":"e2e-rate-b-d16ab9","selected_subscription":"e2e-rate-iso-b-d16ab9","selected_subscription_key":"ai-tenant-e2e-shared-b-8ee985/e2e-rate-iso-b-d16ab9@ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8ee985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d16ab9","namespace":"ai-tenant-e2e-shared-b-8ee985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-8ee985/rate-test-model-8ee985"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T18:47:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"783205aa-4001-4f2a-a9d0-fbd5b072fadd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1afbf90ef38eb2d9d497a4c5d9dd50e3966e40d838591b9735f7d15542ad63af"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f24ddd1ac8eb444484fbf396871474ebce6ae15ae2aff2abc0e5186c3abcfa"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8a49b0490325ffb714d755ed4be29799755aaaabccd902db219ff73fee84aa"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8517b734c65e88cd33ed731812dec0d9dd953522f930d78e7c066e1a7b60761"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39a73aba23ba142db23ec881ad06118289c533e8e83de04cfc1885f4672482b2"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106b733a939aa14f12c0e5d87b0b5b160a2e16f458f241c1d817925f74c73e1d"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/174c9f0b0f01074e3c957aa400e70ca5ed86cd493dd50528008f735a6ce2ce9b"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/992e106e15d22513e879a3f2f8798dd098acbe72158745804d92ec8cc465943d"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654586e3c52faafd0215e338a038e8efab5ff467ed3be7027ce0ffd1ed348e20"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d879f157d997690c6ff6031448e410491259cbc738ecc6533285b9937cca068b"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0db0580c6c7b8860688fee14a48af8ec13b249f95f9c1b6e598fae87eacb640"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d15ed634e520e356e7143aba7f9a7118f09ce46aa962993f57f954b2034e7a7f"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/894b38b9426e6dbbe920083d179b6f5ded17860f87e7f2c2a0b0fff678bcc30b"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb6da33df27fcad50e2e369ca9a410cd612648f4c9c36f435d72b7ced9df22a1"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53649ceba88dd296f673a633156c03084542dc7caf46884735407941dd4a13f"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9959cca1ec8f680cd5cc1fcfac5819d784d70a492fedae2baf08e2514284d68f"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3378bbcbbab0d9e952daa562daaf6b6b9cce7ebf8057aad042b3a839ebc9125c"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd843ff8a7ab63b488c16363206eddb8715aaf35fb1499ee4a8336d367265058"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e494949e8dc3f9441fc055d7af53a2637c6296027855bf84785c6a18cf5383b1"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fcc41feb494c8c3cdc533e1c21f5b6c37a7681ecd8ac2cfb5505186f42ce8b"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1245749d73cead36b9fcca56a6188202a007843a53ae4d145bf3a3aac9fc5a6"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34a55677f61f25defb2de0cb8e1f3e90d4c981f2ec8deb66d6c4fea066adfe59"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4472da757a5e3f3979d21d3e0a20f7ff2d05cee06ab9d904f9533f90e40b471"}
{"level":"info","ts":"2026-07-23T18:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83ed5c41d0c437c89775f3406d409895fcce26855f6f7eed521b08bac44628b4"}