{"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b9a5cb1ec538caedf63b2b4fc19c3b0a81a6355bec1e0a9843a29f4e59bf2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1451a06999eb9c5a9b65729ee7fbb4994c55c42ef2f30116d404d1768c2590a3"} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a374031f62cd8c15a9121712d377813c614487c54fd665b583a96b6e2a07928d"} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b9a5cb1ec538caedf63b2b4fc19c3b0a81a6355bec1e0a9843a29f4e59bf2c"} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490"} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee"} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490"} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:22:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:22:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30068c57-ebb5-4057-9097-71a9fc999492","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51596","PortSpecifier":{"PortValue":51596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30068c57-ebb5-4057-9097-71a9fc999492","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30068c57-ebb5-4057-9097-71a9fc999492","object":"source:{address:{socket_address:{address:\"10.133.0.13:51596\" port_value:51596}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785547334 nanos:267195613} http:{id:\"30068c57-ebb5-4057-9097-71a9fc999492\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"30068c57-ebb5-4057-9097-71a9fc999492\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9e21be7da22be2500c61d7e5118157e725d19b4481c659f015cddd83485c2d1e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30068c57-ebb5-4057-9097-71a9fc999492","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30068c57-ebb5-4057-9097-71a9fc999492","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9e21be7da22be2500c61d7e5118157e725d19b4481c659f015cddd83485c2d1e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"30068c57-ebb5-4057-9097-71a9fc999492"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"30068c57-ebb5-4057-9097-71a9fc999492","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":267195613,"seconds":1785547334}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51596},"address":"10.133.0.13:51596"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9e21be7da22be2500c61d7e5118157e725d19b4481c659f015cddd83485c2d1e"},"headers":{":authority":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZTJmNWItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFlMmY1Yi1vcGVuc2hpZnQtZGVmYXVsdC01NDc0YmQ3NWNiLTQ0Zno4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFlMmY1Yi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZTJmNWItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"30068c57-ebb5-4057-9097-71a9fc999492"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"30068c57-ebb5-4057-9097-71a9fc999492","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":267195613,"seconds":1785547334},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:51596","port":51596}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30068c57-ebb5-4057-9097-71a9fc999492","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30068c57-ebb5-4057-9097-71a9fc999492","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30068c57-ebb5-4057-9097-71a9fc999492","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:54066","PortSpecifier":{"PortValue":54066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","object":"source:{address:{socket_address:{address:\"10.133.0.13:54066\" port_value:54066}}} destination:{address:{socket_address:{address:\"10.132.0.66:443\" port_value:443}}} request:{time:{seconds:1785547334 nanos:301420346} http:{id:\"83e98ca0-c5ab-4f1a-87aa-0c42017a9386\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"83e98ca0-c5ab-4f1a-87aa-0c42017a9386\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"25b94ca7db337476ebbb3c5999bb18c829ce4307e477cba8cb8814a930b9a2f8\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25b94ca7db337476ebbb3c5999bb18c829ce4307e477cba8cb8814a930b9a2f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386"},"host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":301420346,"seconds":1785547334}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54066},"address":"10.133.0.13:54066"}}}}},"destination":{"address":"10.132.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"25b94ca7db337476ebbb3c5999bb18c829ce4307e477cba8cb8814a930b9a2f8"},"headers":{":authority":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386"},"host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":301420346,"seconds":1785547334},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:54066","port":54066}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4224e1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83e98ca0-c5ab-4f1a-87aa-0c42017a9386","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51610","PortSpecifier":{"PortValue":51610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","object":"source:{address:{socket_address:{address:\"10.133.0.13:51610\" port_value:51610}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785547334 nanos:337676461} http:{id:\"432e6d48-7bc2-4e0e-a570-6ab59414fe31\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"432e6d48-7bc2-4e0e-a570-6ab59414fe31\"} path:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\" host:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q20NOWDGfD6wa6Fa_uCtPBjZrry95ccw68w2D3muzDXqGkUHrvbwCHR01CtZ"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","subscription":"e2e-rate-iso-a-d7650a","tenant":"e2e-shared-a-1e2f5b","userId":"900e56db-2372-4086-ade8-51719ade6c18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0xZTJmNWItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTFlMmY1Yi1vcGVuc2hpZnQtZGVmYXVsdC01NDc0YmQ3NWNiLTQ0Zno4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTFlMmY1Yi1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS0xZTJmNWItb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":337676461,"seconds":1785547334}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51610},"address":"10.133.0.13:51610"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9"},"headers":{":authority":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":337676461,"seconds":1785547334},"url_path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:51610","port":51610}}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d7650a"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","selected_subscription":"e2e-rate-iso-a-d7650a","selected_subscription_key":"ai-tenant-e2e-shared-a-1e2f5b/e2e-rate-iso-a-d7650a@ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432e6d48-7bc2-4e0e-a570-6ab59414fe31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51624","PortSpecifier":{"PortValue":51624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","object":"source:{address:{socket_address:{address:\"10.133.0.13:51624\" port_value:51624}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785547335 nanos:379998503} http:{id:\"86b7d994-494d-4c77-bfa8-cb3d7aa5c133\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"86b7d994-494d-4c77-bfa8-cb3d7aa5c133\"} path:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\" host:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q20NOWDGfD6wa6Fa_uCtPBjZrry95ccw68w2D3muzDXqGkUHrvbwCHR01CtZ"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","subscription":"e2e-rate-iso-a-d7650a","tenant":"e2e-shared-a-1e2f5b","userId":"900e56db-2372-4086-ade8-51719ade6c18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":379998503,"seconds":1785547335}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51624},"address":"10.133.0.13:51624"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9"},"headers":{":authority":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":379998503,"seconds":1785547335},"url_path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:51624","port":51624}}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d7650a"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","selected_subscription":"e2e-rate-iso-a-d7650a","selected_subscription_key":"ai-tenant-e2e-shared-a-1e2f5b/e2e-rate-iso-a-d7650a@ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86b7d994-494d-4c77-bfa8-cb3d7aa5c133","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51634","PortSpecifier":{"PortValue":51634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82bca9d0-1204-4d43-aa0b-01355031afc3","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","object":"source:{address:{socket_address:{address:\"10.133.0.13:51634\" port_value:51634}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785547336 nanos:415000868} http:{id:\"82bca9d0-1204-4d43-aa0b-01355031afc3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"82bca9d0-1204-4d43-aa0b-01355031afc3\"} path:\"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions\" host:\"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q20NOWDGfD6wa6Fa_uCtPBjZrry95ccw68w2D3muzDXqGkUHrvbwCHR01CtZ"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","subscription":"e2e-rate-iso-a-d7650a","tenant":"e2e-shared-a-1e2f5b","userId":"900e56db-2372-4086-ade8-51719ade6c18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1e2f5b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"82bca9d0-1204-4d43-aa0b-01355031afc3"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"82bca9d0-1204-4d43-aa0b-01355031afc3","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":415000868,"seconds":1785547336}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51634},"address":"10.133.0.13:51634"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9"},"headers":{":authority":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1e2f5b-kserve-workload-svc.ai-tenant-e2e-shared-a-1e2f5b.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-a-1e2f5b-openshift-default-5474bd75cb-44fz8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"82bca9d0-1204-4d43-aa0b-01355031afc3"},"host":"e2e-shared-a-1e2f5b.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"82bca9d0-1204-4d43-aa0b-01355031afc3","method":"POST","path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":415000868,"seconds":1785547336},"url_path":"/ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:51634","port":51634}}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d7650a"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"900e56db-2372-4086-ade8-51719ade6c18","keyName":"e2e-rate-a-d7650a","selected_subscription":"e2e-rate-iso-a-d7650a","selected_subscription_key":"ai-tenant-e2e-shared-a-1e2f5b/e2e-rate-iso-a-d7650a@ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-1e2f5b/models/facebook/opt-125m","name":"rate-test-model-1e2f5b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d7650a","namespace":"ai-tenant-e2e-shared-a-1e2f5b","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-1e2f5b/rate-test-model-1e2f5b"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82bca9d0-1204-4d43-aa0b-01355031afc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:54080","PortSpecifier":{"PortValue":54080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca48111e-a989-4d32-bda3-f81da23c4a06","method":"POST","path":"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions","host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","object":"source:{address:{socket_address:{address:\"10.133.0.13:54080\" port_value:54080}}} destination:{address:{socket_address:{address:\"10.132.0.66:443\" port_value:443}}} request:{time:{seconds:1785547336 nanos:459655517} http:{id:\"ca48111e-a989-4d32-bda3-f81da23c4a06\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-4224e1-kserve-workload-svc.ai-tenant-e2e-shared-b-4224e1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi00MjI0ZTEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTQyMjRlMS1vcGVuc2hpZnQtZGVmYXVsdC02NmJjOGM1NjQ0LTU3dGhrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTQyMjRlMS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi00MjI0ZTEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"ca48111e-a989-4d32-bda3-f81da23c4a06\"} path:\"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions\" host:\"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"607715c6da73273bc0d552ccf2e8dbb6a9eecaebc37bd915cbfc773bcfbcdea6\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RypnGYVCgooTEZlq_Qx2dw7pExxyuS4stneYAyeHvNeZTJ7qkBZiG9QcwSSG"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f23e1d07-a98e-4e70-9bc3-25ab457df2b3","keyName":"e2e-rate-b-d7650a","subscription":"e2e-rate-iso-b-d7650a","tenant":"e2e-shared-b-4224e1","userId":"f23e1d07-a98e-4e70-9bc3-25ab457df2b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4224e1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-4224e1/models/facebook/opt-125m","name":"rate-test-model-4224e1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d7650a","namespace":"ai-tenant-e2e-shared-b-4224e1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1"}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-4224e1-kserve-workload-svc.ai-tenant-e2e-shared-b-4224e1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ca48111e-a989-4d32-bda3-f81da23c4a06"},"host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"ca48111e-a989-4d32-bda3-f81da23c4a06","method":"POST","path":"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":459655517,"seconds":1785547336}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54080},"address":"10.133.0.13:54080"}}}}},"destination":{"address":"10.132.0.66:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"607715c6da73273bc0d552ccf2e8dbb6a9eecaebc37bd915cbfc773bcfbcdea6"},"headers":{":authority":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-4224e1-kserve-workload-svc.ai-tenant-e2e-shared-b-4224e1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.66~e2e-shared-b-4224e1-openshift-default-66bc8c5644-57thk.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ca48111e-a989-4d32-bda3-f81da23c4a06"},"host":"e2e-shared-b-4224e1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"ca48111e-a989-4d32-bda3-f81da23c4a06","method":"POST","path":"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":459655517,"seconds":1785547336},"url_path":"/ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:54080","port":54080}}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4224e1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d7650a"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f23e1d07-a98e-4e70-9bc3-25ab457df2b3","keyName":"e2e-rate-b-d7650a","selected_subscription":"e2e-rate-iso-b-d7650a","selected_subscription_key":"ai-tenant-e2e-shared-b-4224e1/e2e-rate-iso-b-d7650a@ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-4224e1/models/facebook/opt-125m","name":"rate-test-model-4224e1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d7650a","namespace":"ai-tenant-e2e-shared-b-4224e1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4224e1/rate-test-model-4224e1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:22:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca48111e-a989-4d32-bda3-f81da23c4a06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67073fa1b32103aff32bc8e087c8565dae0233e85a51d09670429d02990519c1"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/115215f2a4196d875db043bbbd6de7001db4e664198c57789d331d63d0d5623c"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dc47106cb474946a1d539c110d0073c24d94d625ca5301948e70d6d66b4acee"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e21be7da22be2500c61d7e5118157e725d19b4481c659f015cddd83485c2d1e"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2f2069c9800a7ca3c76feb9eb5d8066adcfa6b68cda0adf378323d1b0c0e887"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b9a5cb1ec538caedf63b2b4fc19c3b0a81a6355bec1e0a9843a29f4e59bf2c"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a374031f62cd8c15a9121712d377813c614487c54fd665b583a96b6e2a07928d"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17bf313e4596cdff97985720ca6574730ad5c5e67086bec7d998267351a5f298"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a86efd94af13fa21a2970b64485bd34b101336b45224438b32fd249cd3360f51"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a75ccbebd956517d8af4ddd542f895740d3128b078ebc419acd1903d17fac8f"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b388cee895c49f5b3d2e6a90fc7dda714a8dccf49149f04ff4a88aa534b36ce1"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6094babf555805825fc7b6e9b9e14de2902b506270a40dd0a0a35a878832f004"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/005acee013d671bffaef5a473a8eec7252d498969bb92d85560417fbdecd4195"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5042fdc527b7187b6f4a2ea525ac9b6ab898808cc71761cec42b1e24fd2cd211"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25b94ca7db337476ebbb3c5999bb18c829ce4307e477cba8cb8814a930b9a2f8"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9e48b2b27e081fff5c997494e6253187d901b04574780187524df1cc554de39"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/607715c6da73273bc0d552ccf2e8dbb6a9eecaebc37bd915cbfc773bcfbcdea6"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a97679b8bf1b27a5ae0b595563a5d6a6d86288fe4408382d618667f1212399e9"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1451a06999eb9c5a9b65729ee7fbb4994c55c42ef2f30116d404d1768c2590a3"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f591e51cc44a7e1087b07ff641453aeca8314cbac460aab44f787d1f05385697"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63289dcd3ecc9707665c215a1662ffce9ea5148c33eaf7b78f58c296c7a1f490"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4002e50ae6ffdb2c71ec8b7bb5b212a6266029e287ec9e0438a2628469fd5f6c"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa6a6febb09679931fdb163c0cf6acf212aebb16e11e0ca7c66de9745cbc5e3"} {"level":"info","ts":"2026-08-01T01:22:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52689af300ca669c9c4312c920a1558febfc0f423faa34f37517d8638a03e94e"} {"level":"info","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","object":"source:{address:{socket_address:{address:\"10.133.0.13:47096\" port_value:47096}}} destination:{address:{socket_address:{address:\"10.133.0.44:443\" port_value:443}}} request:{time:{seconds:1785547420 nanos:674958391} http:{id:\"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4"},"host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":674958391,"seconds":1785547420}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47096},"address":"10.133.0.13:47096"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4"},"host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":674958391,"seconds":1785547420},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:47096","port":47096}}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3ecbea3-e5e7-4bb0-af24-78ccc29f71b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:47110","PortSpecifier":{"PortValue":47110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","object":"source:{address:{socket_address:{address:\"10.133.0.13:47110\" port_value:47110}}} destination:{address:{socket_address:{address:\"10.133.0.44:443\" port_value:443}}} request:{time:{seconds:1785547420 nanos:726316690} http:{id:\"6dac2fbc-31af-41d4-8252-c8aa1f82deb8\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTc1YjlxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"6dac2fbc-31af-41d4-8252-c8aa1f82deb8\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OMt190UVd6vJ9XsR_2jWK6A2eQBVmH1b1QVb8SagNPoc0k3YTVFo1e9Hdg0h"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d9c3ba2-c0f8-40f8-a998-f7bc48fe14b6","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"1d9c3ba2-c0f8-40f8-a998-f7bc48fe14b6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTc1YjlxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8"},"host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":726316690,"seconds":1785547420}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47110},"address":"10.133.0.13:47110"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTc1YjlxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-78bb78ff78-75b9q.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8"},"host":"maas.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":726316690,"seconds":1785547420},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:47110","port":47110}}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d9c3ba2-c0f8-40f8-a998-f7bc48fe14b6","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:23:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dac2fbc-31af-41d4-8252-c8aa1f82deb8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5"} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:24:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:24:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42452","PortSpecifier":{"PortValue":42452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","object":"source:{address:{socket_address:{address:\"10.133.0.13:42452\" port_value:42452}}} destination:{address:{socket_address:{address:\"10.132.0.68:443\" port_value:443}}} request:{time:{seconds:1785547461 nanos:459861991} http:{id:\"408bcfb7-ecfa-40d0-8ede-b5353864143f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"408bcfb7-ecfa-40d0-8ede-b5353864143f\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1268f31e930b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=096a2031-9a49-48eb-a417-7de1285f6c5a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2622d2d6-71c6-479f-82d5-b7fe7c5f6c78","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"408bcfb7-ecfa-40d0-8ede-b5353864143f"},"host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":459861991,"seconds":1785547461}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42452},"address":"10.133.0.13:42452"}}}}},"destination":{"address":"10.132.0.68:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"},"headers":{":authority":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"408bcfb7-ecfa-40d0-8ede-b5353864143f"},"host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":459861991,"seconds":1785547461},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:42452","port":42452}}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2db7f1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"408bcfb7-ecfa-40d0-8ede-b5353864143f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:42454","PortSpecifier":{"PortValue":42454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99a743f2-2f03-4b9c-be39-5590a35d0905","method":"POST","path":"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions","host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","object":"source:{address:{socket_address:{address:\"10.133.0.13:42454\" port_value:42454}}} destination:{address:{socket_address:{address:\"10.132.0.68:443\" port_value:443}}} request:{time:{seconds:1785547463 nanos:521243845} http:{id:\"99a743f2-2f03-4b9c-be39-5590a35d0905\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-2db7f1-kserve-workload-svc.ai-tenant-e2e-ipp-a-2db7f1.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.133.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"99a743f2-2f03-4b9c-be39-5590a35d0905\"} path:\"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions\" host:\"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QeLXCKyjSvdPxlcJ_xK4l7XpsNx4md8ieFgDlWpwFkHofSGPRUir0gfGqgZ6"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8db3b93-99be-472b-b59c-e8a96ad4d902","keyName":"e2e-ipp-2db7f1","subscription":"ipp-route-2db7f1-sub","tenant":"e2e-ipp-a-2db7f1","userId":"e8db3b93-99be-472b-b59c-e8a96ad4d902","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2db7f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2db7f1/models/facebook/opt-125m","name":"ipp-route-2db7f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2db7f1-sub","namespace":"ai-tenant-e2e-ipp-a-2db7f1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1"}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2db7f1-kserve-workload-svc.ai-tenant-e2e-ipp-a-2db7f1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"99a743f2-2f03-4b9c-be39-5590a35d0905"},"host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"99a743f2-2f03-4b9c-be39-5590a35d0905","method":"POST","path":"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":521243845,"seconds":1785547463}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42454},"address":"10.133.0.13:42454"}}}}},"destination":{"address":"10.132.0.68:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb"},"headers":{":authority":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-2db7f1-kserve-workload-svc.ai-tenant-e2e-ipp-a-2db7f1.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0yZGI3ZjEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTJkYjdmMS1vcGVuc2hpZnQtZGVmYXVsdC04NTg0ZjlkZjY2LXdwamh2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTJkYjdmMS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0yZGI3ZjEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.68~e2e-ipp-a-2db7f1-openshift-default-8584f9df66-wpjhv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.133.0.13","x-forwarded-host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"99a743f2-2f03-4b9c-be39-5590a35d0905"},"host":"e2e-ipp-a-2db7f1.apps.8b4ea285-054b-48c8-a065-1268f31e930b.prod.konfluxeaas.com","id":"99a743f2-2f03-4b9c-be39-5590a35d0905","method":"POST","path":"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":521243845,"seconds":1785547463},"url_path":"/ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.13:42454","port":42454}}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2db7f1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-2db7f1-sub"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8db3b93-99be-472b-b59c-e8a96ad4d902","keyName":"e2e-ipp-2db7f1","selected_subscription":"ipp-route-2db7f1-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1-sub@ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2db7f1/models/facebook/opt-125m","name":"ipp-route-2db7f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2db7f1-sub","namespace":"ai-tenant-e2e-ipp-a-2db7f1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2db7f1/ipp-route-2db7f1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:24:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a743f2-2f03-4b9c-be39-5590a35d0905","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96b7d1b8965b1bedc792b262b33a1c8b530961af0959f31a6d2b9e1468a0d1b5"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/143deb4ce42c1e54747c24b0e314e136af8ed08c6ef07acaffa9e72042439238"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b6a7c9bd31534ebfbbbfb35b10a7ef6f12dc7197150a90a2ce166a69938c49e"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfdee8fa100a235b4afeac5de63135054ba6125910fdf2e916ca282990562ab5"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a143c724bcd034ab687e62c3a550200bee866f880291e15111e7803326a187e7"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/432cf8fb0fadc73e9ef2d6ec34e89d05893369c10a6169b65d64221f81ff775a"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fe4be738c335421455d7d44942d1595f57256542e8cb782fce883771cac8ff2"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dec835fad9926a438aecee987bfaa249697bee57b5c21bdb32fb6942f4d6f38"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ba85117a65a373c50e03000dfe1b8409bffcd343e4df4a402286c46ac6e55b1"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e19727361ac645330d13b51298b148b7d0539bc1000f67c9382fbffab6f921da"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa36db4f94f1367edf21a8bd1ae77dc97fcdbd1d1fe698b1064f1625c13473af"} {"level":"info","ts":"2026-08-01T01:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a869c22ecc442c7792e325829185c9044745e4417e138095a400c40168218bb"}