{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"error","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43982","PortSpecifier":{"PortValue":43982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43982","PortSpecifier":{"PortValue":43982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":48650072},"http":{"id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46522","PortSpecifier":{"PortValue":46522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca518d89-851a-479c-995b-7320ec0f26ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46522","PortSpecifier":{"PortValue":46522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":89822314},"http":{"id":"ca518d89-851a-479c-995b-7320ec0f26ee","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43986","PortSpecifier":{"PortValue":43986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43986","PortSpecifier":{"PortValue":43986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":128566792},"http":{"id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52719a16-c700-4002-a16b-00342053de26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44000","PortSpecifier":{"PortValue":44000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52719a16-c700-4002-a16b-00342053de26","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52719a16-c700-4002-a16b-00342053de26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44000","PortSpecifier":{"PortValue":44000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202107,"nanos":187913719},"http":{"id":"52719a16-c700-4002-a16b-00342053de26","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52719a16-c700-4002-a16b-00342053de26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52719a16-c700-4002-a16b-00342053de26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52719a16-c700-4002-a16b-00342053de26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52719a16-c700-4002-a16b-00342053de26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52719a16-c700-4002-a16b-00342053de26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44016","PortSpecifier":{"PortValue":44016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44016","PortSpecifier":{"PortValue":44016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202108,"nanos":234269787},"http":{"id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35326","PortSpecifier":{"PortValue":35326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35326","PortSpecifier":{"PortValue":35326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":257132770},"http":{"id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60454","PortSpecifier":{"PortValue":60454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60454","PortSpecifier":{"PortValue":60454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":323123438},"http":{"id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":361563443},"http":{"id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35340","PortSpecifier":{"PortValue":35340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15bc3403-f9b0-472b-950c-92140db8526e","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35340","PortSpecifier":{"PortValue":35340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202122,"nanos":411115566},"http":{"id":"15bc3403-f9b0-472b-950c-92140db8526e","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15bc3403-f9b0-472b-950c-92140db8526e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc3403-f9b0-472b-950c-92140db8526e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc3403-f9b0-472b-950c-92140db8526e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202123,"nanos":453844503},"http":{"id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60462","PortSpecifier":{"PortValue":60462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","method":"POST","path":"/ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3/v1/completions","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60462","PortSpecifier":{"PortValue":60462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202123,"nanos":495686233},"http":{"id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oBRg0y9RBXseMDP_W6QtM8fIoZXa9vxfxCP5M6JdUjjM2v1KYG8RwDGPMoF"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oBRg0y9RBXseMDP_W6QtM8fIoZXa9vxfxCP5M6JdUjjM2v1KYG8RwDGPMoF\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0f341c1c-d032-4957-94fe-4b79f5c09627","keyName":"e2e-rate-b-38bccf","subscription":"e2e-rate-iso-b-38bccf","tenant":"e2e-shared-b-a47fa3","userId":"0f341c1c-d032-4957-94fe-4b79f5c09627","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\",\"requestedSubscription\":\"e2e-rate-iso-b-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a47fa3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-38bccf","namespace":"ai-tenant-e2e-shared-b-a47fa3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0f341c1c-d032-4957-94fe-4b79f5c09627","keyName":"e2e-rate-b-38bccf","selected_subscription":"e2e-rate-iso-b-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-b-a47fa3/e2e-rate-iso-b-38bccf@ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a47fa3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-38bccf","namespace":"ai-tenant-e2e-shared-b-a47fa3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"info","ts":"2026-07-16T11:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"info","ts":"2026-07-16T11:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}