{"level":"info","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"debug","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563"} {"level":"info","ts":"2026-08-04T16:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58810","PortSpecifier":{"PortValue":58810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","object":"source:{address:{socket_address:{address:\"10.134.0.9:58810\" port_value:58810}}} destination:{address:{socket_address:{address:\"10.132.0.76:443\" port_value:443}}} request:{time:{seconds:1785862484 nanos:717278980} http:{id:\"3d19f15a-8c21-4b4f-9c18-edb2d560b114\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"3d19f15a-8c21-4b4f-9c18-edb2d560b114\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"efdd843bf5a1527278d8e821b57f3c90ab17776a30109a98a1d1afba283d0ed7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"efdd843bf5a1527278d8e821b57f3c90ab17776a30109a98a1d1afba283d0ed7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdC03Yjg4YzY4ZjViLWNyOXE1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":717278980,"seconds":1785862484}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58810},"address":"10.134.0.9:58810"}}}}},"destination":{"address":"10.132.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"efdd843bf5a1527278d8e821b57f3c90ab17776a30109a98a1d1afba283d0ed7"},"headers":{":authority":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":717278980,"seconds":1785862484},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:58810","port":58810}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d19f15a-8c21-4b4f-9c18-edb2d560b114","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59486","PortSpecifier":{"PortValue":59486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcff6322-48df-423e-8bfe-5c1591eda083","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","object":"source:{address:{socket_address:{address:\"10.134.0.9:59486\" port_value:59486}}} destination:{address:{socket_address:{address:\"10.132.0.79:443\" port_value:443}}} request:{time:{seconds:1785862484 nanos:785132302} http:{id:\"dcff6322-48df-423e-8bfe-5c1591eda083\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"dcff6322-48df-423e-8bfe-5c1591eda083\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dcff6322-48df-423e-8bfe-5c1591eda083"},"host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"dcff6322-48df-423e-8bfe-5c1591eda083","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":785132302,"seconds":1785862484}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59486},"address":"10.134.0.9:59486"}}}}},"destination":{"address":"10.132.0.79:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"},"headers":{":authority":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01YTNjYjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTVhM2NiOC1vcGVuc2hpZnQtZGVmYXVsdC03YzdjOWI1NGQ4LWJjYng3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTVhM2NiOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01YTNjYjgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dcff6322-48df-423e-8bfe-5c1591eda083"},"host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"dcff6322-48df-423e-8bfe-5c1591eda083","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":785132302,"seconds":1785862484},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:59486","port":59486}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a3cb8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcff6322-48df-423e-8bfe-5c1591eda083","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58820","PortSpecifier":{"PortValue":58820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","object":"source:{address:{socket_address:{address:\"10.134.0.9:58820\" port_value:58820}}} destination:{address:{socket_address:{address:\"10.132.0.76:443\" port_value:443}}} request:{time:{seconds:1785862484 nanos:837361533} http:{id:\"1c356f9a-0d0e-4bbd-ac55-abb26060f540\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"1c356f9a-0d0e-4bbd-ac55-abb26060f540\"} path:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\" host:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5LXAwhJYnY9RTeB8_TNotjuO4HZfizLDEDsdLFVzN3FNRBTEG4QOMTyPqs7n"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","subscription":"e2e-rate-iso-a-fd7b78","tenant":"e2e-shared-a-90d707","userId":"1b898279-937a-4881-8f6f-7734f914b598","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":837361533,"seconds":1785862484}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58820},"address":"10.134.0.9:58820"}}}}},"destination":{"address":"10.132.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b"},"headers":{":authority":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":837361533,"seconds":1785862484},"url_path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:58820","port":58820}}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd7b78"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","selected_subscription":"e2e-rate-iso-a-fd7b78","selected_subscription_key":"ai-tenant-e2e-shared-a-90d707/e2e-rate-iso-a-fd7b78@ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c356f9a-0d0e-4bbd-ac55-abb26060f540","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58836","PortSpecifier":{"PortValue":58836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","object":"source:{address:{socket_address:{address:\"10.134.0.9:58836\" port_value:58836}}} destination:{address:{socket_address:{address:\"10.132.0.76:443\" port_value:443}}} request:{time:{seconds:1785862485 nanos:882979378} http:{id:\"6d2d84bd-01b7-43b6-9908-ce1c2b055570\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdC03Yjg4YzY4ZjViLWNyOXE1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"6d2d84bd-01b7-43b6-9908-ce1c2b055570\"} path:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\" host:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5LXAwhJYnY9RTeB8_TNotjuO4HZfizLDEDsdLFVzN3FNRBTEG4QOMTyPqs7n"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","subscription":"e2e-rate-iso-a-fd7b78","tenant":"e2e-shared-a-90d707","userId":"1b898279-937a-4881-8f6f-7734f914b598","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdC03Yjg4YzY4ZjViLWNyOXE1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":882979378,"seconds":1785862485}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58836},"address":"10.134.0.9:58836"}}}}},"destination":{"address":"10.132.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b"},"headers":{":authority":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":882979378,"seconds":1785862485},"url_path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:58836","port":58836}}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd7b78"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","selected_subscription":"e2e-rate-iso-a-fd7b78","selected_subscription_key":"ai-tenant-e2e-shared-a-90d707/e2e-rate-iso-a-fd7b78@ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d2d84bd-01b7-43b6-9908-ce1c2b055570","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58842","PortSpecifier":{"PortValue":58842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","object":"source:{address:{socket_address:{address:\"10.134.0.9:58842\" port_value:58842}}} destination:{address:{socket_address:{address:\"10.132.0.76:443\" port_value:443}}} request:{time:{seconds:1785862486 nanos:927909085} http:{id:\"1bd3ab2e-590d-474c-be1a-9961c28741c6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdC03Yjg4YzY4ZjViLWNyOXE1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"1bd3ab2e-590d-474c-be1a-9961c28741c6\"} path:\"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions\" host:\"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5LXAwhJYnY9RTeB8_TNotjuO4HZfizLDEDsdLFVzN3FNRBTEG4QOMTyPqs7n"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","subscription":"e2e-rate-iso-a-fd7b78","tenant":"e2e-shared-a-90d707","userId":"1b898279-937a-4881-8f6f-7734f914b598","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-90d707.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdC03Yjg4YzY4ZjViLWNyOXE1CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTkwZDcwNy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS05MGQ3MDctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1bd3ab2e-590d-474c-be1a-9961c28741c6"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":927909085,"seconds":1785862486}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58842},"address":"10.134.0.9:58842"}}}}},"destination":{"address":"10.132.0.76:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b"},"headers":{":authority":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-90d707-kserve-workload-svc.ai-tenant-e2e-shared-a-90d707.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.76~e2e-shared-a-90d707-openshift-default-7b88c68f5b-cr9q5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1bd3ab2e-590d-474c-be1a-9961c28741c6"},"host":"e2e-shared-a-90d707.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","method":"POST","path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":927909085,"seconds":1785862486},"url_path":"/ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:58842","port":58842}}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd7b78"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b898279-937a-4881-8f6f-7734f914b598","keyName":"e2e-rate-a-fd7b78","selected_subscription":"e2e-rate-iso-a-fd7b78","selected_subscription_key":"ai-tenant-e2e-shared-a-90d707/e2e-rate-iso-a-fd7b78@ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-90d707/models/facebook/opt-125m","name":"rate-test-model-90d707","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd7b78","namespace":"ai-tenant-e2e-shared-a-90d707","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-90d707/rate-test-model-90d707"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bd3ab2e-590d-474c-be1a-9961c28741c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59494","PortSpecifier":{"PortValue":59494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","method":"POST","path":"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions","host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","object":"source:{address:{socket_address:{address:\"10.134.0.9:59494\" port_value:59494}}} destination:{address:{socket_address:{address:\"10.132.0.79:443\" port_value:443}}} request:{time:{seconds:1785862486 nanos:970092125} http:{id:\"a9bc0ac4-b56a-4f34-9624-74a4b02bff33\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-5a3cb8-kserve-workload-svc.ai-tenant-e2e-shared-b-5a3cb8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"a9bc0ac4-b56a-4f34-9624-74a4b02bff33\"} path:\"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions\" host:\"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UU7SetK4glSSOlAZ_7qBQqmFL4OzTDpsOiedPmvwSGAikaqXnHAxCognPHEz"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d4e55de-de85-4ec8-854a-f29295566c0c","keyName":"e2e-rate-b-fd7b78","subscription":"e2e-rate-iso-b-fd7b78","tenant":"e2e-shared-b-5a3cb8","userId":"3d4e55de-de85-4ec8-854a-f29295566c0c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5a3cb8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5a3cb8/models/facebook/opt-125m","name":"rate-test-model-5a3cb8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd7b78","namespace":"ai-tenant-e2e-shared-b-5a3cb8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8"}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5a3cb8-kserve-workload-svc.ai-tenant-e2e-shared-b-5a3cb8.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33"},"host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","method":"POST","path":"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":970092125,"seconds":1785862486}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59494},"address":"10.134.0.9:59494"}}}}},"destination":{"address":"10.132.0.79:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428"},"headers":{":authority":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5a3cb8-kserve-workload-svc.ai-tenant-e2e-shared-b-5a3cb8.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.79~e2e-shared-b-5a3cb8-openshift-default-7c7c9b54d8-bcbx7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33"},"host":"e2e-shared-b-5a3cb8.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","method":"POST","path":"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":970092125,"seconds":1785862486},"url_path":"/ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:59494","port":59494}}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5a3cb8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fd7b78"} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d4e55de-de85-4ec8-854a-f29295566c0c","keyName":"e2e-rate-b-fd7b78","selected_subscription":"e2e-rate-iso-b-fd7b78","selected_subscription_key":"ai-tenant-e2e-shared-b-5a3cb8/e2e-rate-iso-b-fd7b78@ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5a3cb8/models/facebook/opt-125m","name":"rate-test-model-5a3cb8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd7b78","namespace":"ai-tenant-e2e-shared-b-5a3cb8","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5a3cb8/rate-test-model-5a3cb8"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:54:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9bc0ac4-b56a-4f34-9624-74a4b02bff33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5565257bb195e856a002a228a4da29efdc116f69219d4991c586989fe442453"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dbea04abfbb09397aca97b20b3752ffcba0ac22dba1de8600afbe64973a70d1"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25fbf9042e73ea230b24d3510b2c35b28c86cf675ef9ecef9053275918364ebe"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d25fb720a8511410cca66852940c050f13b16f2251f99f04eabe0142da743d8"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06f98c6b3b2f3a643dec31a2854d658312d9cf212c76c33079b9b31c21fb1a31"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/637b04488863e6ef38c60c7e8ae30b056bc1beab565db974cf9a2515c73ef6c2"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca55779ee108195002e3c2fb8f5486a58e7346d0af592ab3f57b480e654bb09d"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f63fde5c1b27339921e55b358f016fec410ae823ea36df4792731a412dcec428"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38a50d383fc45c428c9616eb20b0c3d0dbe26dc459eda4bc3abdf6f93dd64689"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8a0047d223e0b3fee021e3c65830469fc9033b5bc452fc242f2cccd2f54a516"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cbf7bf80cb8b89028c2249aab76ae3c3093f154027f81eafbf55be81a36fb1"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08b53a8c099daefaf5564f83bbb2c3d174d4dad0e7f2cc436578438f9d99b36e"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b63ce300956a96898046c8639d28c9574889600d5035d93de8a90634c44c8900"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efdd843bf5a1527278d8e821b57f3c90ab17776a30109a98a1d1afba283d0ed7"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07e9626bd65d5af50edb591c3c2c4a77c05279d5293f452823567357bfd0de01"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df882f4dd022a45c602825ba10044c840643964e586af4eff8dd2943d0dd826a"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f253e9e476c9a0aaf4ebd865280dd3e3e5e77384826f3fc0acdfecb103ac767"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1830979964730d89c0d3f527ed7e637107f5af3095d03d983c0c1f9a34247f9"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b9c1856736108a7c727539e12e3b69cd0460d8452caed72a97001bce2fe563"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca964e8f7d407b5f2d1169482a4932b3dd96c27e99fd55846be651cdb66aada1"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeef51bc9f5cf26426ffb352970ecb22040a33f9fb0848fd1c821152bef72737"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90c26b0e7a7adefbe79d5ae19cf574e641a204889964b0cfa3830c1cf357b8e4"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6fcd022f73e3e20c510fd66f110e41215ba70eaf4437184106e6f759d43ed3b"} {"level":"info","ts":"2026-08-04T16:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3eb319debab980e78e9ac9b1ae50f160faf7580d1bcfd7e3b58cb7fd874637e"} {"level":"info","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38678","PortSpecifier":{"PortValue":38678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","object":"source:{address:{socket_address:{address:\"10.134.0.9:38678\" port_value:38678}}} destination:{address:{socket_address:{address:\"10.132.0.30:443\" port_value:443}}} request:{time:{seconds:1785862574 nanos:548159700} http:{id:\"b0e47c50-6b83-4e13-8466-e40d41d6dac1\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LTdncWRyCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b0e47c50-6b83-4e13-8466-e40d41d6dac1\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1"},"host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":548159700,"seconds":1785862574}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38678},"address":"10.134.0.9:38678"}}}}},"destination":{"address":"10.132.0.30:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1"},"host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":548159700,"seconds":1785862574},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:38678","port":38678}}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0e47c50-6b83-4e13-8466-e40d41d6dac1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:38684","PortSpecifier":{"PortValue":38684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.30:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","object":"source:{address:{socket_address:{address:\"10.134.0.9:38684\" port_value:38684}}} destination:{address:{socket_address:{address:\"10.132.0.30:443\" port_value:443}}} request:{time:{seconds:1785862574 nanos:611382434} http:{id:\"704e0dcb-f74a-4267-8c61-630e3e76c2a1\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"704e0dcb-f74a-4267-8c61-630e3e76c2a1\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XDhdJ9XCQDkVnKvG_Ab6S91NrSDSj3zo7FMcXnIxKs5j1xtjcPOzC3tcURwT"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62605beb-76a8-4c9f-9285-d353781b9b01","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"62605beb-76a8-4c9f-9285-d353781b9b01","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.30:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1"},"host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":611382434,"seconds":1785862574}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38684},"address":"10.134.0.9:38684"}}}}},"destination":{"address":"10.132.0.30:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.30~maas-default-gateway-openshift-default-78bb78ff78-7gqdr.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1"},"host":"maas.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":611382434,"seconds":1785862574},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:38684","port":38684}}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"62605beb-76a8-4c9f-9285-d353781b9b01","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:56:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"704e0dcb-f74a-4267-8c61-630e3e76c2a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f"} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:56:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f"} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T16:56:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"} {"level":"info","ts":"2026-08-04T16:56:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"info","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36714","PortSpecifier":{"PortValue":36714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","object":"source:{address:{socket_address:{address:\"10.134.0.9:36714\" port_value:36714}}} destination:{address:{socket_address:{address:\"10.133.0.70:443\" port_value:443}}} request:{time:{seconds:1785862632 nanos:917092287} http:{id:\"f4f1c591-0963-4c79-8339-0b86cfcc8fef\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f4f1c591-0963-4c79-8339-0b86cfcc8fef\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/59b4a5bed7e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c0f6dc19-d0b9-40f0-96ad-91939864a3cb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2dcd366e-31be-4dcd-8b29-a4a171bd9f37","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef"},"host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":917092287,"seconds":1785862632}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36714},"address":"10.134.0.9:36714"}}}}},"destination":{"address":"10.133.0.70:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"},"headers":{":authority":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1iYmUwZGMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWJiZTBkYy1vcGVuc2hpZnQtZGVmYXVsdC03NGZkYjk3NzRiLTk4a2M5CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWJiZTBkYy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1iYmUwZGMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef"},"host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":917092287,"seconds":1785862632},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:36714","port":36714}}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bbe0dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:57:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4f1c591-0963-4c79-8339-0b86cfcc8fef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:36724","PortSpecifier":{"PortValue":36724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","method":"POST","path":"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions","host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","object":"source:{address:{socket_address:{address:\"10.134.0.9:36724\" port_value:36724}}} destination:{address:{socket_address:{address:\"10.133.0.70:443\" port_value:443}}} request:{time:{seconds:1785862634 nanos:985803608} http:{id:\"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-bbe0dc-kserve-workload-svc.ai-tenant-e2e-ipp-a-bbe0dc.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.9\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.134.0.9\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6\"} path:\"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions\" host:\"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5dp8lNV5MzMaOVQh_rfWqWoEMyQ7zmSPiuItdu1x0GHQaNTPocUYnhCArhSA"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"562613c8-1bc2-41df-a14b-11b2d0adf7f1","keyName":"e2e-ipp-bbe0dc","subscription":"ipp-route-bbe0dc-sub","tenant":"e2e-ipp-a-bbe0dc","userId":"562613c8-1bc2-41df-a14b-11b2d0adf7f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-bbe0dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-bbe0dc/models/facebook/opt-125m","name":"ipp-route-bbe0dc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bbe0dc-sub","namespace":"ai-tenant-e2e-ipp-a-bbe0dc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc"}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-bbe0dc-kserve-workload-svc.ai-tenant-e2e-ipp-a-bbe0dc.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1iYmUwZGMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWJiZTBkYy1vcGVuc2hpZnQtZGVmYXVsdC03NGZkYjk3NzRiLTk4a2M5CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWJiZTBkYy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1iYmUwZGMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6"},"host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","method":"POST","path":"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":985803608,"seconds":1785862634}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36724},"address":"10.134.0.9:36724"}}}}},"destination":{"address":"10.133.0.70:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"},"headers":{":authority":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-bbe0dc-kserve-workload-svc.ai-tenant-e2e-ipp-a-bbe0dc.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.9","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.70~e2e-ipp-a-bbe0dc-openshift-default-74fdb9774b-98kc9.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.134.0.9","x-forwarded-host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6"},"host":"e2e-ipp-a-bbe0dc.apps.dfb46277-bb95-490e-a746-59b4a5bed7e4.prod.konfluxeaas.com","id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","method":"POST","path":"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":985803608,"seconds":1785862634},"url_path":"/ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.9:36724","port":36724}}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-bbe0dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-bbe0dc-sub"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"562613c8-1bc2-41df-a14b-11b2d0adf7f1","keyName":"e2e-ipp-bbe0dc","selected_subscription":"ipp-route-bbe0dc-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc-sub@ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-bbe0dc/models/facebook/opt-125m","name":"ipp-route-bbe0dc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-bbe0dc-sub","namespace":"ai-tenant-e2e-ipp-a-bbe0dc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-bbe0dc/ipp-route-bbe0dc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T16:57:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c29e87ab-5cf1-4ab2-80a8-bc77ba094ca6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96124dee72451a82703b9d9928b58a82b35940930a5addd71444f39250a230b"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/841f00c20fe521e7dfc04b84260130bc09eff6f91daf175a6d958c344e4a9bcc"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3acc825ca153f96b4fd057cb09875e2139a74c89fb2017e1dcd0d21510b11e5d"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3d44929e22535f8be1ff0fd9e697b7204175216ea5030d0f7a92d24190c668f"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/389e4b42ac78785c6d65bb893928f9a7ae8345f3387e4d18b4924ebe81bf0ed9"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8023cdc8575bd3e7aa3560915b6ca297243c8b8d1f3a27c0ff0698279646d1"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/436c9bbcae9eb6c25d9cd25e381aba4fedbcbec1624bc8be81dbe60da64900da"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a39c63dea33203eacd9fcf2c4dbd354429353fc758bea1f06cd08fb0cf60bac"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02d0d2ab888f2413804d5ea39207844e27b75b32daea1ac3c3cc888eef167907"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54abc7e228b1d77002c4ec1ca4c9a80ed746fc29d8198e13a4b5c38b8ce3320f"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ccca9171b1eebbcd8baeeed51b547aa515ad54b84577a624681050d3652599a"} {"level":"info","ts":"2026-08-04T16:58:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f78f0427d04616532398b5fef3cad5e6d6f9a4ba54e033143a45e9ff3539216"}