{"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3"} {"level":"error","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"error","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596"} {"level":"info","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:28:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"info","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"info","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"error","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46974","PortSpecifier":{"PortValue":46974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82dcc04c-39ed-4136-b484-5694adf6dad5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","object":"source:{address:{socket_address:{address:\"10.132.0.18:46974\" port_value:46974}}} destination:{address:{socket_address:{address:\"10.134.0.60:443\" port_value:443}}} request:{time:{seconds:1785846550 nanos:506731631} http:{id:\"82dcc04c-39ed-4136-b484-5694adf6dad5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"82dcc04c-39ed-4136-b484-5694adf6dad5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4a77d8a2bacb1733246ccdcdea3059ce31b7d4ca3632f2cc628a6af989b19409\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4a77d8a2bacb1733246ccdcdea3059ce31b7d4ca3632f2cc628a6af989b19409"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"82dcc04c-39ed-4136-b484-5694adf6dad5"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"82dcc04c-39ed-4136-b484-5694adf6dad5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":506731631,"seconds":1785846550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46974},"address":"10.132.0.18:46974"}}}}},"destination":{"address":"10.134.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4a77d8a2bacb1733246ccdcdea3059ce31b7d4ca3632f2cc628a6af989b19409"},"headers":{":authority":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"82dcc04c-39ed-4136-b484-5694adf6dad5"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"82dcc04c-39ed-4136-b484-5694adf6dad5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":506731631,"seconds":1785846550},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:46974","port":46974}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dcc04c-39ed-4136-b484-5694adf6dad5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38060","PortSpecifier":{"PortValue":38060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"969509e3-7786-4e49-8654-bc3aa48b735b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","object":"source:{address:{socket_address:{address:\"10.132.0.18:38060\" port_value:38060}}} destination:{address:{socket_address:{address:\"10.134.0.61:443\" port_value:443}}} request:{time:{seconds:1785846550 nanos:544601008} http:{id:\"969509e3-7786-4e49-8654-bc3aa48b735b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"969509e3-7786-4e49-8654-bc3aa48b735b\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"969509e3-7786-4e49-8654-bc3aa48b735b"},"host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"969509e3-7786-4e49-8654-bc3aa48b735b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":544601008,"seconds":1785846550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38060},"address":"10.132.0.18:38060"}}}}},"destination":{"address":"10.134.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"},"headers":{":authority":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"969509e3-7786-4e49-8654-bc3aa48b735b"},"host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"969509e3-7786-4e49-8654-bc3aa48b735b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":544601008,"seconds":1785846550},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:38060","port":38060}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-038ca6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"969509e3-7786-4e49-8654-bc3aa48b735b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46986","PortSpecifier":{"PortValue":46986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","object":"source:{address:{socket_address:{address:\"10.132.0.18:46986\" port_value:46986}}} destination:{address:{socket_address:{address:\"10.134.0.60:443\" port_value:443}}} request:{time:{seconds:1785846550 nanos:586488717} http:{id:\"6b6e04a7-ee80-45ae-a043-20b11a5a4871\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"6b6e04a7-ee80-45ae-a043-20b11a5a4871\"} path:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\" host:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ro0txZHO2rPtAmrH_YYHvg0zaiQQZBErvWP4fzhlAvhRP50u7b2jTAKj7dTu"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","subscription":"e2e-rate-iso-a-67b389","tenant":"e2e-shared-a-a7013e","userId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":586488717,"seconds":1785846550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46986},"address":"10.132.0.18:46986"}}}}},"destination":{"address":"10.134.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561"},"headers":{":authority":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":586488717,"seconds":1785846550},"url_path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:46986","port":46986}}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-67b389"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","selected_subscription":"e2e-rate-iso-a-67b389","selected_subscription_key":"ai-tenant-e2e-shared-a-a7013e/e2e-rate-iso-a-67b389@ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b6e04a7-ee80-45ae-a043-20b11a5a4871","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46996","PortSpecifier":{"PortValue":46996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","object":"source:{address:{socket_address:{address:\"10.132.0.18:46996\" port_value:46996}}} destination:{address:{socket_address:{address:\"10.134.0.60:443\" port_value:443}}} request:{time:{seconds:1785846551 nanos:622643077} http:{id:\"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a\"} path:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\" host:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ro0txZHO2rPtAmrH_YYHvg0zaiQQZBErvWP4fzhlAvhRP50u7b2jTAKj7dTu"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","subscription":"e2e-rate-iso-a-67b389","tenant":"e2e-shared-a-a7013e","userId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNzAxM2Utb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE3MDEzZS1vcGVuc2hpZnQtZGVmYXVsdC03ODg2Yzg0NTRkLTVkN2doCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE3MDEzZS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNzAxM2Utb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":622643077,"seconds":1785846551}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46996},"address":"10.132.0.18:46996"}}}}},"destination":{"address":"10.134.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561"},"headers":{":authority":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":622643077,"seconds":1785846551},"url_path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:46996","port":46996}}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-67b389"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","selected_subscription":"e2e-rate-iso-a-67b389","selected_subscription_key":"ai-tenant-e2e-shared-a-a7013e/e2e-rate-iso-a-67b389@ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1a56a93-7268-4b7d-8ef2-a58fd6ab212a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07a67055-dbb2-41d2-89b6-e187743b860d","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","object":"source:{address:{socket_address:{address:\"10.132.0.18:47002\" port_value:47002}}} destination:{address:{socket_address:{address:\"10.134.0.60:443\" port_value:443}}} request:{time:{seconds:1785846552 nanos:663189362} http:{id:\"07a67055-dbb2-41d2-89b6-e187743b860d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"07a67055-dbb2-41d2-89b6-e187743b860d\"} path:\"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions\" host:\"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ro0txZHO2rPtAmrH_YYHvg0zaiQQZBErvWP4fzhlAvhRP50u7b2jTAKj7dTu"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","subscription":"e2e-rate-iso-a-67b389","tenant":"e2e-shared-a-a7013e","userId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a7013e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"07a67055-dbb2-41d2-89b6-e187743b860d"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"07a67055-dbb2-41d2-89b6-e187743b860d","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":663189362,"seconds":1785846552}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47002},"address":"10.132.0.18:47002"}}}}},"destination":{"address":"10.134.0.60:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561"},"headers":{":authority":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a7013e-kserve-workload-svc.ai-tenant-e2e-shared-a-a7013e.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.60~e2e-shared-a-a7013e-openshift-default-7886c8454d-5d7gh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"07a67055-dbb2-41d2-89b6-e187743b860d"},"host":"e2e-shared-a-a7013e.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"07a67055-dbb2-41d2-89b6-e187743b860d","method":"POST","path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":663189362,"seconds":1785846552},"url_path":"/ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:47002","port":47002}}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-67b389"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"897ebe2d-073e-4222-bee1-5c8d1451cc30","keyName":"e2e-rate-a-67b389","selected_subscription":"e2e-rate-iso-a-67b389","selected_subscription_key":"ai-tenant-e2e-shared-a-a7013e/e2e-rate-iso-a-67b389@ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a7013e/models/facebook/opt-125m","name":"rate-test-model-a7013e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-67b389","namespace":"ai-tenant-e2e-shared-a-a7013e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a7013e/rate-test-model-a7013e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07a67055-dbb2-41d2-89b6-e187743b860d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:38068","PortSpecifier":{"PortValue":38068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","method":"POST","path":"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions","host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","object":"source:{address:{socket_address:{address:\"10.132.0.18:38068\" port_value:38068}}} destination:{address:{socket_address:{address:\"10.134.0.61:443\" port_value:443}}} request:{time:{seconds:1785846552 nanos:698703726} http:{id:\"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-038ca6-kserve-workload-svc.ai-tenant-e2e-shared-b-038ca6.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4\"} path:\"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions\" host:\"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y8VAlyAECvd0z75C_B7Hpf7Wq9QaiPqjvKbjAZE9OU4Wjq6A7Du3qIKSzD2F"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec80bc44-0606-437f-a310-1a96dfc885e3","keyName":"e2e-rate-b-67b389","subscription":"e2e-rate-iso-b-67b389","tenant":"e2e-shared-b-038ca6","userId":"ec80bc44-0606-437f-a310-1a96dfc885e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-038ca6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-038ca6/models/facebook/opt-125m","name":"rate-test-model-038ca6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-67b389","namespace":"ai-tenant-e2e-shared-b-038ca6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6"}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-038ca6-kserve-workload-svc.ai-tenant-e2e-shared-b-038ca6.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4"},"host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","method":"POST","path":"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":698703726,"seconds":1785846552}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38068},"address":"10.132.0.18:38068"}}}}},"destination":{"address":"10.134.0.61:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"},"headers":{":authority":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-038ca6-kserve-workload-svc.ai-tenant-e2e-shared-b-038ca6.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.61~e2e-shared-b-038ca6-openshift-default-684685fc4d-2pxn5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4"},"host":"e2e-shared-b-038ca6.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","method":"POST","path":"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":698703726,"seconds":1785846552},"url_path":"/ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:38068","port":38068}}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-038ca6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-67b389"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec80bc44-0606-437f-a310-1a96dfc885e3","keyName":"e2e-rate-b-67b389","selected_subscription":"e2e-rate-iso-b-67b389","selected_subscription_key":"ai-tenant-e2e-shared-b-038ca6/e2e-rate-iso-b-67b389@ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-038ca6/models/facebook/opt-125m","name":"rate-test-model-038ca6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-67b389","namespace":"ai-tenant-e2e-shared-b-038ca6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-038ca6/rate-test-model-038ca6"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:29:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"959e2e75-bb6e-4bce-ba5f-c5b45af1b5d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c5853df43f0b9dbaa561423baa8690d76d1af58210666a225a6c9a79af9e596"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c8c4e671004cd3510137678bf54524adb4025009673d1fd38dc9ba3c4823a40"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49ad6d825331c085bf74114b7420fcab8a2c51ec46d55f57da3cdbb88a7d1c67"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4902041097cf59a6ab9f82e9f164d52ad2bcb4b8b2a05181a2557d64cce8362"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a308d0897e1ff08252333ab890cdd499e3d5778d518c991681d3f5cad473561"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e250f8bc52f68b1caf275ce56e7b24c7d620b3354be95681eaf3f72e101b6ff"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf0c66ed1dc0a762cdaf3f132c37d58f7118fac130bfafab1663625a5c6f5e79"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2b02831a716aac220e61ab7602a4ea85179d55ae9523ab19624b9fa6b96bca"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d5d5fcbb826145805c4db13e82eeda0282adeb3a12a32afa1dc1cb2bb061cd6"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9afe262d49b3815fb6ccdc99310b6db9758e190ccb351eeec690021f30f50953"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b0789fa40ed3aed12701a34bca4e99e5b3cb3e8a503b7688a76823f2bef4437"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3e627e633838c8f1d3a6b8aa4e02d3188b9e9445edb7d6733cd1a2be97e2fab"} {"level":"info","ts":"2026-08-04T12:29:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9814df1110996c5e70cd1d85cecdd8058b539cfa7531712e9b4a67380c0a2b80"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/def646ec982ce58919b3528fa513a24e26300083c4667d593e9c49da4a63e77f"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1af7ada8c937985835d3107277f4ffef837d3fdd30f1dc58b15054974bf8293"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ea06cf5bf42673a738e01a826f03ed704a9aec5e3e099f2d538b819b035aafa"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a77d8a2bacb1733246ccdcdea3059ce31b7d4ca3632f2cc628a6af989b19409"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6c002d10dc2ca826b5446aedf5222451dbdfa37b0126639786d9811fd6b4210"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ac3d92d63cf5a8d070c87372efca076f904188d9535a34c3c237a9e2f57708"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c667ef0071b61239bc7ee90c5a36efc183181a47640e732ebfc08e36d4d37eb3"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a63cf2a8f19c0ad5e34f239e60f344f4fb404d06fc28afeada1b1d959ee97359"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03f946d06d62167c4b5d3de61effa30fae4aa2ba35b9f2969aea086d313ecf91"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/405725ce6b48c8af11acad0acdd1c2e76f6161ad72d81595f4a0d55b192fabfb"} {"level":"info","ts":"2026-08-04T12:29:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95f0c04da64a7a8ea99dc06bb4d0e3c1af80cad04997824e295c73aa0ad8acef"} {"level":"info","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11569754-933b-4262-8b99-b73a9380b998","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59864","PortSpecifier":{"PortValue":59864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11569754-933b-4262-8b99-b73a9380b998","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11569754-933b-4262-8b99-b73a9380b998","object":"source:{address:{socket_address:{address:\"10.132.0.18:59864\" port_value:59864}}} destination:{address:{socket_address:{address:\"10.134.0.38:443\" port_value:443}}} request:{time:{seconds:1785846642 nanos:716387231} http:{id:\"11569754-933b-4262-8b99-b73a9380b998\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"11569754-933b-4262-8b99-b73a9380b998\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11569754-933b-4262-8b99-b73a9380b998","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11569754-933b-4262-8b99-b73a9380b998","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"11569754-933b-4262-8b99-b73a9380b998"},"host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"11569754-933b-4262-8b99-b73a9380b998","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":716387231,"seconds":1785846642}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59864},"address":"10.132.0.18:59864"}}}}},"destination":{"address":"10.134.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"11569754-933b-4262-8b99-b73a9380b998"},"host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"11569754-933b-4262-8b99-b73a9380b998","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":716387231,"seconds":1785846642},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:59864","port":59864}}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11569754-933b-4262-8b99-b73a9380b998","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11569754-933b-4262-8b99-b73a9380b998","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11569754-933b-4262-8b99-b73a9380b998","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59876","PortSpecifier":{"PortValue":59876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","object":"source:{address:{socket_address:{address:\"10.132.0.18:59876\" port_value:59876}}} destination:{address:{socket_address:{address:\"10.134.0.38:443\" port_value:443}}} request:{time:{seconds:1785846642 nanos:763686986} http:{id:\"225ee9c4-8184-4347-99c0-a7d439cf59b5\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"225ee9c4-8184-4347-99c0-a7d439cf59b5\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YQmkHdF9wrfCUaHZ_XKygHXlk7qMRHNM3kpjyjywZtFgVCWtzDiPX6EHCf0Q"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04af422d-a00e-40bb-b084-6ab0aa011de8","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"04af422d-a00e-40bb-b084-6ab0aa011de8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXA2emJxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"225ee9c4-8184-4347-99c0-a7d439cf59b5"},"host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":763686986,"seconds":1785846642}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59876},"address":"10.132.0.18:59876"}}}}},"destination":{"address":"10.134.0.38:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.38~maas-default-gateway-openshift-default-78bb78ff78-p6zbq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"225ee9c4-8184-4347-99c0-a7d439cf59b5"},"host":"maas.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":763686986,"seconds":1785846642},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:59876","port":59876}}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04af422d-a00e-40bb-b084-6ab0aa011de8","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"225ee9c4-8184-4347-99c0-a7d439cf59b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1"} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe"} {"level":"debug","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"} {"level":"error","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T12:31:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T12:31:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"info","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62380ad-718b-43df-9367-65df1a854471","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55556","PortSpecifier":{"PortValue":55556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62380ad-718b-43df-9367-65df1a854471","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62380ad-718b-43df-9367-65df1a854471","object":"source:{address:{socket_address:{address:\"10.132.0.18:55556\" port_value:55556}}} destination:{address:{socket_address:{address:\"10.134.0.68:443\" port_value:443}}} request:{time:{seconds:1785846716 nanos:292024132} http:{id:\"a62380ad-718b-43df-9367-65df1a854471\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a62380ad-718b-43df-9367-65df1a854471\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a62380ad-718b-43df-9367-65df1a854471","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62380ad-718b-43df-9367-65df1a854471","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d1a91789395"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=112bca29-207e-4746-84f3-81ae5dede825"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9824eb5d-abf0-4ad0-be1b-be6b56aae625","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a62380ad-718b-43df-9367-65df1a854471"},"host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"a62380ad-718b-43df-9367-65df1a854471","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":292024132,"seconds":1785846716}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55556},"address":"10.132.0.18:55556"}}}}},"destination":{"address":"10.134.0.68:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"},"headers":{":authority":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a62380ad-718b-43df-9367-65df1a854471"},"host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"a62380ad-718b-43df-9367-65df1a854471","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":292024132,"seconds":1785846716},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:55556","port":55556}}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a888a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62380ad-718b-43df-9367-65df1a854471","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62380ad-718b-43df-9367-65df1a854471","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62380ad-718b-43df-9367-65df1a854471","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55570","PortSpecifier":{"PortValue":55570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","method":"POST","path":"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions","host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","object":"source:{address:{socket_address:{address:\"10.132.0.18:55570\" port_value:55570}}} destination:{address:{socket_address:{address:\"10.134.0.68:443\" port_value:443}}} request:{time:{seconds:1785846718 nanos:348081835} http:{id:\"21428270-a9a9-4a33-bc7e-ace91e9a1d97\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-a888a4-kserve-workload-svc.ai-tenant-e2e-ipp-a-a888a4.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.18\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.18\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"21428270-a9a9-4a33-bc7e-ace91e9a1d97\"} path:\"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions\" host:\"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-stoR78OTnE0rKTn8_48HG7MGnwTBqFvT9ufX1JhPmlc95tUgge3TZTTgl4a0"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd3a3b9f-03a2-45ce-a0dd-43a77fbbfba5","keyName":"e2e-ipp-a888a4","subscription":"ipp-route-a888a4-sub","tenant":"e2e-ipp-a-a888a4","userId":"cd3a3b9f-03a2-45ce-a0dd-43a77fbbfba5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a888a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-a888a4/models/facebook/opt-125m","name":"ipp-route-a888a4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a888a4-sub","namespace":"ai-tenant-e2e-ipp-a-a888a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4"}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-a888a4-kserve-workload-svc.ai-tenant-e2e-ipp-a-a888a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97"},"host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","method":"POST","path":"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":348081835,"seconds":1785846718}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55570},"address":"10.132.0.18:55570"}}}}},"destination":{"address":"10.134.0.68:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"},"headers":{":authority":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-a888a4-kserve-workload-svc.ai-tenant-e2e-ipp-a-a888a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.18","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.68~e2e-ipp-a-a888a4-openshift-default-5bcb99d7d6-hp2m5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.18","x-forwarded-host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97"},"host":"e2e-ipp-a-a888a4.apps.5a9b7f7f-4a69-47d1-b2d1-1d1a91789395.prod.konfluxeaas.com","id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","method":"POST","path":"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":348081835,"seconds":1785846718},"url_path":"/ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.18:55570","port":55570}}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a888a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-a888a4-sub"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd3a3b9f-03a2-45ce-a0dd-43a77fbbfba5","keyName":"e2e-ipp-a888a4","selected_subscription":"ipp-route-a888a4-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4-sub@ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-a888a4/models/facebook/opt-125m","name":"ipp-route-a888a4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a888a4-sub","namespace":"ai-tenant-e2e-ipp-a-a888a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a888a4/ipp-route-a888a4"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T12:31:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21428270-a9a9-4a33-bc7e-ace91e9a1d97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T12:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d9ac7495e66acf9779890e6a33fdbb8640da2aa593a04f813f15ca8b95241b3"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10aed959ebfcf430402956306f593e1e511b5cdec6e69c17ba2cb689bb32b49f"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d690d69b5b38d7ea3dac44b6110809e6433b9077b91a8f88e774c3d0a4aaa00"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a46b12edbe443f33c7d044d278df3b049a638b6201810d436e4059961d1ec72c"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a0e6b24d79ecb8f6c1ad40edfe7ef3d9c5ae80d0d9e231b1976f10561c76bbf"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e1761c5979c606b481b4ab8e4f0af9e0b6a371e802dd54d01f0765d110f1221"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f20e1bd95f8409b8cf7fa416358639a35308690a5e39f78a6584b0daba700fe"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/996d60b72b8f1043e22d4b68c5b8bb9529d68d8d45e21762de0f44f094a08eb1"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82bf49cc627865488097c0856303237837618102130dc757bdc2c607df72ad66"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f8b410bb76f29cbe17c083d9555f78a02e50c1ccd4dfa57c164e47a31d15c88"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b40c44041c8ccc6d9c43fb0bed6c5e334cde49a6f7f1b5587cea81e2a12e42e"} {"level":"info","ts":"2026-08-04T12:33:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5b3054a0e182162cfcc9c0eb89980adb110b0e9c2fc125df2e880111f7263d"}