{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17195012ede88a739fd36669aaf272d48c5b0428d0b8a259df1e3d7904941a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17195012ede88a739fd36669aaf272d48c5b0428d0b8a259df1e3d7904941a2"}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"error","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60254","PortSpecifier":{"PortValue":60254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60254","PortSpecifier":{"PortValue":60254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300992,"nanos":189426256},"http":{"id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","method":"POST","headers":{":authority":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"]}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"381e5a428afe92341ed5e63439ab215da59cf815af9e906345bb5b96c61f3b79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c2561dc-3a17-4cd7-be68-b00547eb17f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40410","PortSpecifier":{"PortValue":40410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b550f6.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40410","PortSpecifier":{"PortValue":40410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300992,"nanos":225534993},"http":{"id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","method":"POST","headers":{":authority":"e2e-shared-b-b550f6.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"]}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b550f6.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b550f6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9b2dfb-5ebd-455d-b085-ada4d0f05e55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60268","PortSpecifier":{"PortValue":60268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","method":"POST","path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions","host":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60268","PortSpecifier":{"PortValue":60268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300992,"nanos":262095421},"http":{"id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","method":"POST","headers":{":authority":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv\"}"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","subscription":"e2e-rate-iso-a-fae24a","tenant":"e2e-shared-a-b70f7c","userId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\",\"requestedSubscription\":\"e2e-rate-iso-a-fae24a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fae24a"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","selected_subscription":"e2e-rate-iso-a-fae24a","selected_subscription_key":"ai-tenant-e2e-shared-a-b70f7c/e2e-rate-iso-a-fae24a@ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"341bddf9-9b8c-4dff-8f79-425fcff876a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","method":"POST","path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions","host":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60284","PortSpecifier":{"PortValue":60284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300993,"nanos":303678755},"http":{"id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","method":"POST","headers":{":authority":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv\"}"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","subscription":"e2e-rate-iso-a-fae24a","tenant":"e2e-shared-a-b70f7c","userId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\",\"requestedSubscription\":\"e2e-rate-iso-a-fae24a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fae24a"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","selected_subscription":"e2e-rate-iso-a-fae24a","selected_subscription_key":"ai-tenant-e2e-shared-a-b70f7c/e2e-rate-iso-a-fae24a@ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c117dc07-41ef-4ba8-86b4-ca1a0ab6c942","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60292","PortSpecifier":{"PortValue":60292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","method":"POST","path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions","host":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60292","PortSpecifier":{"PortValue":60292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300994,"nanos":341065211},"http":{"id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","method":"POST","headers":{":authority":"e2e-shared-a-b70f7c.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QZ2KOQKFFCRdbeod_lXOOYB43HLuEFlVKJRTqp15uLw6ATAxfDFDAT7wxlkv\"}"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","subscription":"e2e-rate-iso-a-fae24a","tenant":"e2e-shared-a-b70f7c","userId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\",\"requestedSubscription\":\"e2e-rate-iso-a-fae24a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b70f7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fae24a"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"50f1c947-88f4-45d8-a5c5-c6973a8fd43d","keyName":"e2e-rate-a-fae24a","selected_subscription":"e2e-rate-iso-a-fae24a","selected_subscription_key":"ai-tenant-e2e-shared-a-b70f7c/e2e-rate-iso-a-fae24a@ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-b70f7c/models/facebook/opt-125m","name":"rate-test-model-b70f7c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fae24a","namespace":"ai-tenant-e2e-shared-a-b70f7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-b70f7c/rate-test-model-b70f7c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e79d0b3-5338-4ec7-bf7a-2e7767e2691a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40414","PortSpecifier":{"PortValue":40414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","method":"POST","path":"/ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6/v1/completions","host":"e2e-shared-b-b550f6.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40414","PortSpecifier":{"PortValue":40414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785300994,"nanos":374717545},"http":{"id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","method":"POST","headers":{":authority":"e2e-shared-b-b550f6.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lySwR612xt5AHIPk_WK9LLx9O5D7WH1DChemikvRDIztDG6fAQgmt3XtBNm8"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b550f6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lySwR612xt5AHIPk_WK9LLx9O5D7WH1DChemikvRDIztDG6fAQgmt3XtBNm8\"}"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b550f6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9782bb81-9fe8-4a52-a66b-1adbddaa7106","keyName":"e2e-rate-b-fae24a","subscription":"e2e-rate-iso-b-fae24a","tenant":"e2e-shared-b-b550f6","userId":"9782bb81-9fe8-4a52-a66b-1adbddaa7106","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b550f6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6\",\"requestedSubscription\":\"e2e-rate-iso-b-fae24a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b550f6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-b550f6/models/facebook/opt-125m","name":"rate-test-model-b550f6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fae24a","namespace":"ai-tenant-e2e-shared-b-b550f6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6"}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b550f6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fae24a"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9782bb81-9fe8-4a52-a66b-1adbddaa7106","keyName":"e2e-rate-b-fae24a","selected_subscription":"e2e-rate-iso-b-fae24a","selected_subscription_key":"ai-tenant-e2e-shared-b-b550f6/e2e-rate-iso-b-fae24a@ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-b550f6/models/facebook/opt-125m","name":"rate-test-model-b550f6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fae24a","namespace":"ai-tenant-e2e-shared-b-b550f6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b550f6/rate-test-model-b550f6"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:56:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ecee287-5d5d-4bfc-9c23-bdf1b8f7b260","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07bb7eac645bfe5ed3c3b63cf5fc7def4f0977ff2ee455a69b9a3598d604172a"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/433625d6ec9a535e513930479c9858a817ec889b976fb4891901a21380e44691"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8fa3ce5ec15a2e7e79c8d8cd34a5ad9edd4ddb70773395c6ad7babd7c010d2d"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abf10f724d2cf1a46289c24f4fdb8010ad20b48c05ad8a843505a0e7b9d81d16"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a007c91b00045663c96a02ad71ff0b2a387a7f100b9f9f263b6f2d4537f9e6cc"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5ee8bd98b628bc9d1d95adabfd3e4df05dbfcd88a639b0e1aa124c3c8d47a6b"}
{"level":"info","ts":"2026-07-29T04:56:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1102e61e04ac5823fca64ceec740c0bf4fa66a47deff432c8f77eb533615db76"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c17195012ede88a739fd36669aaf272d48c5b0428d0b8a259df1e3d7904941a2"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c57e8bbadafa99b9c9d499ae6b3f112dd33b213ade63db1dd81216394298641"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80096608ef2bd593a2048b300f41a89a1d1f08b040b85f1d9dd7455527070cfc"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e913f4bcf7392c4d66467561106ab5c32863d197481926634be27b442127b050"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbae1e5d47f0ce72a7fd823113c87dd10a4e1769870e04e6597a34acb4f9e3d1"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d44a551661f072ecb703e641c4d7774d83520582df0487adadca04b0ecb01582"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dddc9f549df808f6710a687cb1957c26f174feff4f0a9a59d770ec784e0df1a3"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381e5a428afe92341ed5e63439ab215da59cf815af9e906345bb5b96c61f3b79"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80f4b14088cddc7c436e59ac70b3fdb46d358ac712ae8ea8d04318936a393287"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c5a81d4ffa7493ff2d33378a42c5627a1de6b8cb898fb7e55ed2b3b32a5ab22"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b2d405d482f2f646029d571fd88c954c4fbc41e6aa2c509c3016942b06ea7c"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e73f25d5a5d3f1890344667e0158f06b8958d7fbac7bd00392f4c487b886cfde"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0549e676343f8e097a3071deff22b40d9ac730f76e93f590c09467b09959761c"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0c112740e371ab152f0273f6abb0cd003c5c8a71c97432db2a1588dd74bf72c"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93d0493ee8498e3635561298e2d090e878706d398baa643b237319e3ca29a059"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed2ad562d9c7edb281ffb7cde2efed7fd3eca1ad515f14aed32c00bcc8f3d98e"}
{"level":"info","ts":"2026-07-29T04:56:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15a994fee23431a442e739ba85ea38c58d7d0e26e2f928c98407235e0f5a919b"}
{"level":"info","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62096f20-2450-42c0-ac85-727814b50e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58414","PortSpecifier":{"PortValue":58414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62096f20-2450-42c0-ac85-727814b50e63","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62096f20-2450-42c0-ac85-727814b50e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58414","PortSpecifier":{"PortValue":58414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301082,"nanos":183768304},"http":{"id":"62096f20-2450-42c0-ac85-727814b50e63","method":"POST","headers":{":authority":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62096f20-2450-42c0-ac85-727814b50e63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"]}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62096f20-2450-42c0-ac85-727814b50e63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62096f20-2450-42c0-ac85-727814b50e63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62096f20-2450-42c0-ac85-727814b50e63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62096f20-2450-42c0-ac85-727814b50e63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58416","PortSpecifier":{"PortValue":58416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58416","PortSpecifier":{"PortValue":58416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301082,"nanos":238615238},"http":{"id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","method":"POST","headers":{":authority":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TtXWeUAKnW23c22N_qGJgNYmYTTUiD4tRlvk5KWKwyO8Bd5gOSJQRqr4Chcb"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TtXWeUAKnW23c22N_qGJgNYmYTTUiD4tRlvk5KWKwyO8Bd5gOSJQRqr4Chcb\"}"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5e07900-9620-4da2-a20c-fd63e3bb68ee","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c5e07900-9620-4da2-a20c-fd63e3bb68ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5e07900-9620-4da2-a20c-fd63e3bb68ee","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:58:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86f3f2a-3253-4a2b-9c89-8ebc1cf552ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"info","ts":"2026-07-29T04:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"error","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T04:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"error","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-29T04:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47078","PortSpecifier":{"PortValue":47078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-ec7357.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47078","PortSpecifier":{"PortValue":47078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301124,"nanos":952322452},"http":{"id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","method":"POST","headers":{":authority":"e2e-ipp-a-ec7357.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"]}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14e49715647c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=48dbab8e-7613-486e-8472-b04f034c8ba0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d1d2fe6c-92f5-4f6b-bfc0-46d365080b7a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-ec7357.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ec7357/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:58:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2658e8ee-848a-4ef0-97d7-6268513ff80f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","method":"POST","path":"/ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357/v1/chat/completions","host":"e2e-ipp-a-ec7357.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785301127,"nanos":15949807},"http":{"id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","method":"POST","headers":{":authority":"e2e-ipp-a-ec7357.apps.10ce6fed-736e-4fb1-b1cb-14e49715647c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SBFNlxmQ2eg2cgvU_uGYK6Jj31lqks1h0QwYRQdUktA4kVoPjYSyXgqSEg9O"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-ec7357.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SBFNlxmQ2eg2cgvU_uGYK6Jj31lqks1h0QwYRQdUktA4kVoPjYSyXgqSEg9O\"}"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ec7357.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b3286e63-36af-4212-ab12-0f3f68533a7e","keyName":"e2e-ipp-ec7357","subscription":"ipp-route-ec7357-sub","tenant":"e2e-ipp-a-ec7357","userId":"b3286e63-36af-4212-ab12-0f3f68533a7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-ec7357.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357\",\"requestedSubscription\":\"ipp-route-ec7357-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-ec7357.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ec7357/models/facebook/opt-125m","name":"ipp-route-ec7357","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ec7357-sub","namespace":"ai-tenant-e2e-ipp-a-ec7357","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357"}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-ec7357/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-ec7357-sub"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b3286e63-36af-4212-ab12-0f3f68533a7e","keyName":"e2e-ipp-ec7357","selected_subscription":"ipp-route-ec7357-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357-sub@ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-ec7357/models/facebook/opt-125m","name":"ipp-route-ec7357","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-ec7357-sub","namespace":"ai-tenant-e2e-ipp-a-ec7357","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-ec7357/ipp-route-ec7357"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-29T04:58:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41bd2a62-4cc2-4459-864e-07b4bfe7c139","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a36968bdf09cf6e045137c77dd59eece5588a2c2ee89d9442ac4c7cb8b2bfd"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/714c49f60facd0e27ea312da934b93bc2892c6651d23ca903f6376cdd8e9801f"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfe2b0066766445e7ec3aac7fbf7e51668e241add056c9da893253ee15474a2a"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/735efba3ee8eef3a9aaa29f76d842f215565bcece9759cb9ffe8aec00180bbb4"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8997de5a730557ac873a57c3817ee1286118422af116aa53ef8a58c786409ec6"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd435b42000c04774dbe19041e3c84a0e77451d80934d857bb647cf45670dfc5"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5caaace099849a2147a9237fbcf2ef3eb46384710152ef48fcaf55468c12bda"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb32f7cd0f612557141c056e79389848c7acdaacf622653308e583142716598c"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74301959ed797f2e8a6eae07474a0e4216975ab02576c7ffcd1cc12013197013"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7f55a4d6a018aaa1ac56d40db1f76531f1966d29caa30c0d3dcbb1bb0daa242"}
{"level":"info","ts":"2026-07-29T04:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4323e9fcce134c56e3c9c3148469defda622e423559c1ad6da2d8e56c2c3b425"}
{"level":"info","ts":"2026-07-29T04:59:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/790d6a6bb29e164e35e08ba8fe6af46c7bf1c28e4df4314b320382982a70854a"}