{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40450","PortSpecifier":{"PortValue":40450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836987,"nanos":790168490},"http":{"id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LwyD0iR3gxvy5CSd_KoA7gb2kmu1XKCjtUuAhClvZg4ujkqF2orupYNxA8D9"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LwyD0iR3gxvy5CSd_KoA7gb2kmu1XKCjtUuAhClvZg4ujkqF2orupYNxA8D9\"}"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8b41b702-0521-46e3-a68c-0e262748d6f4","keyName":"e2e-sub-iso-720e8d","subscription":"e2e-shared-sub-7b27c7","tenant":"e2e-shared-b-470e58","userId":"8b41b702-0521-46e3-a68c-0e262748d6f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/sub-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7b27c7"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:03:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a84c25c-4b3e-4cb1-aff2-dc912b582ca3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29d50094aed236130c8c69bf51b3696f3dd0242cd14f50e047b3846589a2889"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08aee934de8912d58de0e1e2b115a1600aa471f0cfe436d580a489c9b93d86ac"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a666f07d1785455d807acead20e10784115309b064f9844563cc449dac7089b4"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ece39874f50517fda64bbbc5f473155912ed563d7aaafc7d6c24bbdc0357b2"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5783bd14b8190b231e2b692208a561d21af5201537833e5753b5b0562ab11750"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15d68a6ce43cf3b9e9c0da34f75617425dacb05d380a86c1bdde204a53b602ab"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e5d2f141ec9e2bf5be2a7619a2752ca949ed2ec2e3371d8c6ef4a4e319f53a"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f6f0eefc7d6d96240a070360d5e8896bc17457c5381ac5c54d7ca5d24e6637d"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57fcb24fd7458ea5a0c6f91165a1155214b8452d4c2a9aaac5efaa5d1c82bfe3"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ab18dd7d3a16538c1352f602ac0040db32b0fb6bd27b99db85ef666c0bbde0e"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3919d8766ed7d7a1c5b0e9b648cd00d5cb154a8cbd02893895f1475c686f8063"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cfd8e83b974691b6ebdc8308d3d29ada6124661be425071c4771e3f68847b0c"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9718c6bd5a8d7d5c5a5aa3bc3ca00fb609d92352e6375dee7fe9f9f214d4723"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89099231b129ee7f93d841a8f428d6cfb8d9af66c9c60bc8c0bdb16a8fd15fca"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae663a9b3617fb3a43254088441425e24e6ccec3a8df5baa9a9ee4ac8151da2c"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65766898a9e8c2052b626199d3a6b0592c0ec839fc02ce0f7bf21adb42121db6"}
{"level":"info","ts":"2026-07-23T20:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:04:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T20:04:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":276994664},"http":{"id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d031c0c4-a017-4ce2-b977-3215e9bf60ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49774","PortSpecifier":{"PortValue":49774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f96deef-e29d-439f-bf22-7c9521f8f585","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49774","PortSpecifier":{"PortValue":49774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":316706279},"http":{"id":"5f96deef-e29d-439f-bf22-7c9521f8f585","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f96deef-e29d-439f-bf22-7c9521f8f585","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60478","PortSpecifier":{"PortValue":60478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837058,"nanos":352027991},"http":{"id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb278a22-51ab-4da2-bcb0-a15bd16da66f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837059,"nanos":417074678},"http":{"id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca69defe-f2e8-4f90-bb94-b304fb3740e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a460490-8507-4730-9f3d-47de731c5fd5","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60490","PortSpecifier":{"PortValue":60490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837060,"nanos":454490499},"http":{"id":"6a460490-8507-4730-9f3d-47de731c5fd5","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eNUWlP4OpgF6jI3a_qe9ZNd2gcQSEc2zysoLKyBJj4P3wThhKrILqd9MrTt0\"}"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","subscription":"e2e-rate-iso-a-7d3ba6","tenant":"e2e-shared-a-fb64e5","userId":"f00a6928-5e68-4096-af2e-d1588857496f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3ba6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3ba6"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f00a6928-5e68-4096-af2e-d1588857496f","keyName":"e2e-rate-a-7d3ba6","selected_subscription":"e2e-rate-iso-a-7d3ba6","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-7d3ba6@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3ba6","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a460490-8507-4730-9f3d-47de731c5fd5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46072","PortSpecifier":{"PortValue":46072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7a84075-40a4-4479-8f8b-6865848840e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46072","PortSpecifier":{"PortValue":46072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":323051361},"http":{"id":"b7a84075-40a4-4479-8f8b-6865848840e6","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7a84075-40a4-4479-8f8b-6865848840e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":362583562},"http":{"id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"df23cd6d-4c32-4918-97b9-84db67679871","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"]}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/46a27f3a3855"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=03df723d-54dd-486a-9b44-3653a3baa0e0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"df23cd6d-4c32-4918-97b9-84db67679871","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4e791b0-83e4-49f5-aaca-725f6c26e483","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46080","PortSpecifier":{"PortValue":46080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837073,"nanos":395765019},"http":{"id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05fefdd9-1b15-4b30-85fe-7484aa687d38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46096","PortSpecifier":{"PortValue":46096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837074,"nanos":429892283},"http":{"id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e465c0-1d68-4a5a-a1f1-f4a73e638ced","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","method":"POST","path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions","host":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46106","PortSpecifier":{"PortValue":46106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837075,"nanos":466207127},"http":{"id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","method":"POST","headers":{":authority":"e2e-shared-a-fb64e5.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NJwjaQ5x990RE8tW_K8aO79AacGUpFViHKIRs5eJbsPbbx8CGWsvaDYT5lGU\"}"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","subscription":"e2e-rate-iso-a-55e141","tenant":"e2e-shared-a-fb64e5","userId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\",\"requestedSubscription\":\"e2e-rate-iso-a-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-fb64e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-fb64e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-55e141"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"262e59d2-e130-4d64-b5e5-cefbe1a4cee6","keyName":"e2e-rate-a-55e141","selected_subscription":"e2e-rate-iso-a-55e141","selected_subscription_key":"ai-tenant-e2e-shared-a-fb64e5/e2e-rate-iso-a-55e141@ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fb64e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-55e141","namespace":"ai-tenant-e2e-shared-a-fb64e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-fb64e5/rate-test-model-fb64e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b898aa62-05b0-4474-b7bb-1c474d5575a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39798","PortSpecifier":{"PortValue":39798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","method":"POST","path":"/ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58/v1/completions","host":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39798","PortSpecifier":{"PortValue":39798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784837075,"nanos":498839816},"http":{"id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","method":"POST","headers":{":authority":"e2e-shared-b-470e58.apps.92255702-3dca-456a-8f76-46a27f3a3855.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1W1ev7rHyT2fhVTeS_elwOOnz02SP3sjckh7dGXzuOoTni7QHyCNzLmTTEdNI"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1W1ev7rHyT2fhVTeS_elwOOnz02SP3sjckh7dGXzuOoTni7QHyCNzLmTTEdNI\"}"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab703e86-6439-4942-b548-eb730e3d1249","keyName":"e2e-rate-b-55e141","subscription":"e2e-rate-iso-b-55e141","tenant":"e2e-shared-b-470e58","userId":"ab703e86-6439-4942-b548-eb730e3d1249","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\",\"requestedSubscription\":\"e2e-rate-iso-b-55e141\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-470e58.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-470e58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-55e141","namespace":"ai-tenant-e2e-shared-b-470e58","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58"}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-470e58/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-55e141"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab703e86-6439-4942-b548-eb730e3d1249","keyName":"e2e-rate-b-55e141","selected_subscription":"e2e-rate-iso-b-55e141","selected_subscription_key":"ai-tenant-e2e-shared-b-470e58/e2e-rate-iso-b-55e141@ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-470e58","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-55e141","namespace":"ai-tenant-e2e-shared-b-470e58","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-470e58/rate-test-model-470e58"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T20:04:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5ab21af-b1c6-4296-aab4-e214f18e605d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4d300b732dc836c77083fa662939efdc6f8c674faea901bb71de9b54d59a1e9"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4158a5091d108c4c95754e377cdad89cca832e76bcf51f036c9e9bb193b1083a"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1311eca98a76f029661a8248c359e3c62385df020f7b47ff88c2e949019efd"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3946d56243052ec304e0545c9789e7a90091eede840b49edc9f2c71b0263b497"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bb75420bebbc90082042d26d0fafd9c6c300dc537971433da7045881123dda8"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b44dbb4a51b6722b93e33b88f276c4beaa952b7ab15437c6142fe6a84e943de7"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c9504fc5c3b06abab572f6187fa4db02c1447d26834d8029ea02068f09806ed"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/299182b68209352d793598b903b94465a0d6983583f1000342585806b65f7282"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b124f523ba3b408c0f6d742d3aa3cab603dbb18bc1ca0a869fab2a19dc5bb6"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/333038f74a1254742cfdac2a7cee1672981e3b2670f71fad0d7080d553282373"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fca5cf8efc27e8f7e0e271b4a76f20c56b2a05486e06e3c66e0f60c7e2b5aee"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6973ad629bee2152d59c6d4240c4d394e15e9b10707435039b696eb38c640516"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7255f6dc140371bf8241ae46c8ca5c906ada64c5082a4b38886690b6012c9aeb"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a710961b62458142cc48dff93cf4165d5057fa338b20bd3c5bb1128591b29aa6"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092f2b5a533a1dcb42fd1ea8096f70e2b6f57fa0f5ba0588b6e31789dac3419e"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c65f057ea5f3489603bbc2fe1271b226742daed1ddd32b22d6b8d227aa0d4d"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08829cd9aad7d819d767f3c66d66370b7bce9a708bf9b229c3cb5355015889bf"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa7e3febd2bb8870efaf3be015848a4fedd099a98f93c64e5ada15693dcc4822"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10fc980f4db202078a2b0e1a30663e75205034227f5ef14e25f6f36c090ccd3d"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5ab9b3a60a65ea3e72053423f8651258b932d431845288d05f7503719a94701"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54d36b5413d0481f19aa09cd4303372f47a481c62878c2b5d1bb069ff4633bdf"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e549935ff459f8afb35741db818addb13b72c9a2a8f4187b40250420ad8295bb"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49a6a3578273e67f56142935edb6d6bd7b8501e93549ee214d4724a9803acbaf"}
{"level":"info","ts":"2026-07-23T20:04:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1096cb1dee5c10536d7193b2b7881b7fc9d03932544421008d5e4ca97a59886"}