{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SAUrQlPXiH8egG5V_HaraIAukTIs5S9GSB8g5865WofPTQq7wzkPEMBjTrKI\"}"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c22d039d-8f0d-41e6-ba4d-56a6e1f4c484","keyName":"e2e-sub-iso-07e866","subscription":"e2e-shared-sub-9e8742","tenant":"e2e-shared-a-4b0cf7","userId":"c22d039d-8f0d-41e6-ba4d-56a6e1f4c484","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/sub-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9e8742"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5dc5327-a2a7-4abb-b588-d7d3e5ea2a08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51714","PortSpecifier":{"PortValue":51714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342181,"nanos":580469210},"http":{"id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aQgYF15YytjtBBxl_2VKxRWim9jKqkcxkV89wDoIsjlxrw1MUhwQBkSGx6JC"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aQgYF15YytjtBBxl_2VKxRWim9jKqkcxkV89wDoIsjlxrw1MUhwQBkSGx6JC\"}"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90ebce24-b047-41cf-964e-cf45b4316215","keyName":"e2e-sub-iso-f8956e","subscription":"e2e-shared-sub-9e8742","tenant":"e2e-shared-b-124cd9","userId":"90ebce24-b047-41cf-964e-cf45b4316215","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/sub-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9e8742"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"555e2a8b-8e33-40e1-a3dc-8d41653d278b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e9e96165d306a2296d7282b7743d6a38ce7e5f6c200f7aa73f96c28f6f97762"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396a8876e3d60241fd6aef1fd5827ddc0f6d27629b88424e9bda425ded5f7786"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5abf8714291811d893d9323a1dc05242dd73cc05beaa4444236ee2bcf6b0c9a6"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587bde5b00b801a4c85f4810bad242aa5119af2a976bce98ccaa5b95774c5c10"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6aab66b98bc9fa8f71515fb9de69ecbbf8dd7fe3843c9638a2739e78d08fbc4"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70c3a9dc77fcb2cde61a88377eba9c330abd4d8f4196f7338219e72f7126493d"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a470f26dd6292013f5dce8386c006a75a480fbaf495ccd492bf3c945c33ed5"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"info","ts":"2026-07-18T02:36:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a775d313825140c1d6a615634545d6f7a02ec9e5f12543c3c4bae8808d128d2f"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/167649aa860f6db24fcdabd8841b6831d45174005a7a7b8ea46fd6af2d8b5705"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2459a260cddb72d2722cd5483fe12face328234bbd7df5fa436abde1c1efd17"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d67c8367a4f49b8b18d4f274c0ba03f7312e3bb392afeadba93ac90914e0622"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b71a058a4c30a0793ba8e59ae8b7cb5de9c1ce34bc2a017b6fa80e04a0db5eba"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f574c9bc9b21349635d2b8791b24f3255556f2342db88726169ea4b200ef9337"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02f641f480a1f370c7443b3a05828ec50bb6a36c268b307f4e8631f0a94aef44"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179049fceb4815bceacaf36742f240031706d643edaa831a292b270d3311f435"}
{"level":"info","ts":"2026-07-18T02:36:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66059b7f3b35cb74d66d1de5e2d477ba8692b807afbd6c33582b5d5328ce6885"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"info","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"}
{"level":"info","ts":"2026-07-18T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T02:37:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T02:37:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19a31323-d74f-49c7-939d-318526e818ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59440","PortSpecifier":{"PortValue":59440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19a31323-d74f-49c7-939d-318526e818ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19a31323-d74f-49c7-939d-318526e818ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59440","PortSpecifier":{"PortValue":59440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":159288328},"http":{"id":"19a31323-d74f-49c7-939d-318526e818ab","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19a31323-d74f-49c7-939d-318526e818ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19a31323-d74f-49c7-939d-318526e818ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19a31323-d74f-49c7-939d-318526e818ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19a31323-d74f-49c7-939d-318526e818ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19a31323-d74f-49c7-939d-318526e818ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58750","PortSpecifier":{"PortValue":58750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":204141047},"http":{"id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce16c6f-6358-409b-bbb7-91b2825a03e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59446","PortSpecifier":{"PortValue":59446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59446","PortSpecifier":{"PortValue":59446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342247,"nanos":263540895},"http":{"id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b143dc39-01c5-4bc7-ba9b-f535c729ac34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59460","PortSpecifier":{"PortValue":59460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59460","PortSpecifier":{"PortValue":59460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342248,"nanos":344547905},"http":{"id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6997bc91-c7bf-4fbf-ab12-1e86184afa31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342249,"nanos":413434836},"http":{"id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IEtK1qZjQ3PeFaxx_QJ1ITeo5X0T06xLzdCskOIGVllmD6Fn1DPcUmShIg1E\"}"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","subscription":"e2e-rate-iso-a-81f8d0","tenant":"e2e-shared-a-4b0cf7","userId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-81f8d0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-81f8d0"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"247c3ac9-ace6-46da-a651-fd4d3805c1b1","keyName":"e2e-rate-a-81f8d0","selected_subscription":"e2e-rate-iso-a-81f8d0","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-81f8d0@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-81f8d0","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"359efbef-97bb-4d18-a5b7-2ab363c0cce2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2473c2ee-b767-4213-97b5-c720d13a81b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":258005962},"http":{"id":"2473c2ee-b767-4213-97b5-c720d13a81b7","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2473c2ee-b767-4213-97b5-c720d13a81b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36752d1d-7c94-4a06-9975-f34107ce6728","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":299839018},"http":{"id":"36752d1d-7c94-4a06-9975-f34107ce6728","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"]}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8119f3500750"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=363a8077-96b1-4b69-a83b-4e542cd5e385"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c82f91d-a68b-475c-9823-2bbb1dca7646","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36752d1d-7c94-4a06-9975-f34107ce6728","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79e79a5b-cf61-4f24-9309-98e68f27e870","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57758","PortSpecifier":{"PortValue":57758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342260,"nanos":339965155},"http":{"id":"79e79a5b-cf61-4f24-9309-98e68f27e870","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e79a5b-cf61-4f24-9309-98e68f27e870","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57770","PortSpecifier":{"PortValue":57770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57770","PortSpecifier":{"PortValue":57770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342261,"nanos":383361412},"http":{"id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff0fe53-e8c0-4e54-b07f-82d0564861c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","method":"POST","path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions","host":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:57778","PortSpecifier":{"PortValue":57778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342262,"nanos":425203351},"http":{"id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","method":"POST","headers":{":authority":"e2e-shared-a-4b0cf7.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dvDgiSgwyBzARvex_wAAAnhsxJK9oURN2TBHBSWSAfSbDFkfH6xs73w3DIG6\"}"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","subscription":"e2e-rate-iso-a-018172","tenant":"e2e-shared-a-4b0cf7","userId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\",\"requestedSubscription\":\"e2e-rate-iso-a-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4b0cf7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-4b0cf7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-018172"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"82020eca-9d0d-42f8-b843-ab0bb6e12784","keyName":"e2e-rate-a-018172","selected_subscription":"e2e-rate-iso-a-018172","selected_subscription_key":"ai-tenant-e2e-shared-a-4b0cf7/e2e-rate-iso-a-018172@ai-tenant-e2e-shared-a-4b0cf7/rate-test-model-4b0cf7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4b0cf7","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-018172","namespace":"ai-tenant-e2e-shared-a-4b0cf7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b5c79fc-4f35-490b-97fe-83f84d1d2b7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e5b24d2-070a-45e2-912e-a50a230338b4","method":"POST","path":"/ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9/v1/completions","host":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36064","PortSpecifier":{"PortValue":36064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784342262,"nanos":464642585},"http":{"id":"6e5b24d2-070a-45e2-912e-a50a230338b4","method":"POST","headers":{":authority":"e2e-shared-b-124cd9.apps.3c9bae26-11ae-4d2a-99d7-8119f3500750.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3jRpnYgzh4vldbqE_4XZe48IXrSDlbRrnHmyvpLLASDGIxiNv6d4TrI0zbtZ"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3jRpnYgzh4vldbqE_4XZe48IXrSDlbRrnHmyvpLLASDGIxiNv6d4TrI0zbtZ\"}"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","keyName":"e2e-rate-b-018172","subscription":"e2e-rate-iso-b-018172","tenant":"e2e-shared-b-124cd9","userId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\",\"requestedSubscription\":\"e2e-rate-iso-b-018172\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-124cd9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-124cd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-018172","namespace":"ai-tenant-e2e-shared-b-124cd9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-124cd9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-018172"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f02c72b4-164d-4c16-8a5d-18a2d7c42058","keyName":"e2e-rate-b-018172","selected_subscription":"e2e-rate-iso-b-018172","selected_subscription_key":"ai-tenant-e2e-shared-b-124cd9/e2e-rate-iso-b-018172@ai-tenant-e2e-shared-b-124cd9/rate-test-model-124cd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-124cd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-018172","namespace":"ai-tenant-e2e-shared-b-124cd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T02:37:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5b24d2-070a-45e2-912e-a50a230338b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0fe56499f7f8b2527c78be7b92b333abc4bab90a960ecea5f231d5a41519fbc"}
{"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01fea7c807806a4efdd418044bc848f8a5f398407935ff2713fa3ee9276a8d82"}
{"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46188ea6498c19b1fe67ee69401476b4bd79e06317adff79f5928b8fc8345e18"}
{"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5e269b3aed1eff15236462689e23cfda4ae05240cdaf34532ae013924e6aeb"}
{"level":"info","ts":"2026-07-18T02:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61126fd052a6b76591e84226ab52f953cea3169b5ba7d0a0cb2c1aa3de4b5a53"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b03fd1cc0a292e2384412bfaab07c791c8816727fd4d21c3991d651897509b8c"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f646d81c116ad846d4f03c959fdde0fd04717517f113fd3429b503bf8d571cd"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/763b31a2fdb616c6e5b363f5bc03f20f082260046002743be4e8ab64d7519e79"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dec76fc4e247f7b51c926679f034a3807549db19269c4298359560804c2daee"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d07c982a76f7a0f2d757590a86d0ce608a49e493ff1b2b00af0e079a1a4142f2"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b8f6b081de9753227b446bdb11e72178f8742980b6aec4f8d6f4432f538a97"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92711f7b4c3f990f710566a5ad0c0646b5ed355753b43cee3eaaea252accd433"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56268c4912d140cd22308f2ca75e0f84891f7510c515eff2164bf9ee8c16ebcc"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c79124b7f65c8a450056112315383c11b7827cd8840b44d87e59f600fa459e87"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2957ab13a4b5b2e0d5b1fd01e5fa4c02f507bfe6d4ed422647ca2700eb5381d"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1792d06172cbb1860107b9e5e675729aa2d13dc981f32d69ebc6552e0c1befba"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52c183609abea7aa282f2123a7689f93f2a6013648c95a26d22f1c8feef460e"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094d28976e2b065f81911e4dec66c3191dbd99017ab52266ec643592fb7c1c76"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/953845b4e838102ef509804f0712d5efcb45c254f0afb33f068081ce9fb4e858"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68cede6f4879e47c1f783ec76ecdc6cd73d29a75ae7d6bc86ead4d80592a52c5"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38ad785dc98184fb993b52407968e2be8af8b8c0053f45c4cfc3201a2c181df7"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe762ef6fb663b088a53f776998e2831567da1c56e075581a10c975019b1bb17"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f0ea30b87b41b0954bee158726896684e7a9f9194daf678043be48048556f2"}
{"level":"info","ts":"2026-07-18T02:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c61fa193e0b15e50a29a37281f882611e0e57df716ce69c6f10bc77531fa3e"}