{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"error","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38452","PortSpecifier":{"PortValue":38452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7db130ab-9fa4-4190-8a2a-f968babcd212","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38452","PortSpecifier":{"PortValue":38452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":108167090},"http":{"id":"7db130ab-9fa4-4190-8a2a-f968babcd212","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37350","PortSpecifier":{"PortValue":37350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4405ee97-64b2-4823-8fe9-db52dac49801","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37350","PortSpecifier":{"PortValue":37350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":151663354},"http":{"id":"4405ee97-64b2-4823-8fe9-db52dac49801","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38462","PortSpecifier":{"PortValue":38462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38462","PortSpecifier":{"PortValue":38462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":189734440},"http":{"id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453895,"nanos":249516090},"http":{"id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afa3e73-4933-42ba-8047-447276122796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38474","PortSpecifier":{"PortValue":38474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4afa3e73-4933-42ba-8047-447276122796","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afa3e73-4933-42ba-8047-447276122796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38474","PortSpecifier":{"PortValue":38474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453896,"nanos":283318658},"http":{"id":"4afa3e73-4933-42ba-8047-447276122796","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4afa3e73-4933-42ba-8047-447276122796","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4afa3e73-4933-42ba-8047-447276122796","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4afa3e73-4933-42ba-8047-447276122796","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afa3e73-4933-42ba-8047-447276122796","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afa3e73-4933-42ba-8047-447276122796","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47614","PortSpecifier":{"PortValue":47614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47614","PortSpecifier":{"PortValue":47614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":20641774},"http":{"id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40620","PortSpecifier":{"PortValue":40620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0264eb2e-3798-4810-912a-823cab44d7ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40620","PortSpecifier":{"PortValue":40620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":58062561},"http":{"id":"0264eb2e-3798-4810-912a-823cab44d7ec","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"240532a8-9de7-4e82-a07f-098aa0cd6917","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":94435523},"http":{"id":"240532a8-9de7-4e82-a07f-098aa0cd6917","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47644","PortSpecifier":{"PortValue":47644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47644","PortSpecifier":{"PortValue":47644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453908,"nanos":129875461},"http":{"id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453909,"nanos":164662262},"http":{"id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b69346-d13f-415c-a180-010796aff63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40622","PortSpecifier":{"PortValue":40622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00b69346-d13f-415c-a180-010796aff63a","method":"POST","path":"/ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4/v1/completions","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b69346-d13f-415c-a180-010796aff63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40622","PortSpecifier":{"PortValue":40622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453909,"nanos":196804753},"http":{"id":"00b69346-d13f-415c-a180-010796aff63a","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ARjBpiTPZqvc9spI_iDzPnIE6dBRvHEHbA8bSv8MmMzQdrOyDGydyZ6c4gA4"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b69346-d13f-415c-a180-010796aff63a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ARjBpiTPZqvc9spI_iDzPnIE6dBRvHEHbA8bSv8MmMzQdrOyDGydyZ6c4gA4\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"07abcd4b-e168-4460-9210-aae7f1e24c14","keyName":"e2e-rate-b-173761","subscription":"e2e-rate-iso-b-173761","tenant":"e2e-shared-b-0a6be4","userId":"07abcd4b-e168-4460-9210-aae7f1e24c14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b69346-d13f-415c-a180-010796aff63a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\",\"requestedSubscription\":\"e2e-rate-iso-b-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a6be4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-173761","namespace":"ai-tenant-e2e-shared-b-0a6be4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00b69346-d13f-415c-a180-010796aff63a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-173761"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"07abcd4b-e168-4460-9210-aae7f1e24c14","keyName":"e2e-rate-b-173761","selected_subscription":"e2e-rate-iso-b-173761","selected_subscription_key":"ai-tenant-e2e-shared-b-0a6be4/e2e-rate-iso-b-173761@ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a6be4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-173761","namespace":"ai-tenant-e2e-shared-b-0a6be4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b69346-d13f-415c-a180-010796aff63a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b69346-d13f-415c-a180-010796aff63a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}