{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"}
{"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"}
{"level":"error","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":138124529},"http":{"id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":175727885},"http":{"id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33334","PortSpecifier":{"PortValue":33334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649e7b52-c165-42e5-9416-05047c1394d1","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33334","PortSpecifier":{"PortValue":33334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":213402093},"http":{"id":"649e7b52-c165-42e5-9416-05047c1394d1","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649e7b52-c165-42e5-9416-05047c1394d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e7b52-c165-42e5-9416-05047c1394d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e7b52-c165-42e5-9416-05047c1394d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188368,"nanos":252204005},"http":{"id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188369,"nanos":292497342},"http":{"id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35504","PortSpecifier":{"PortValue":35504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","method":"POST","path":"/ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004/v1/completions","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35504","PortSpecifier":{"PortValue":35504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188369,"nanos":329851287},"http":{"id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Bjc6iCQzosGQSfhp_W8KXJYu3N45WRRJh2zqIDY2PqGrX9LkWWCchdYkCja1"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Bjc6iCQzosGQSfhp_W8KXJYu3N45WRRJh2zqIDY2PqGrX9LkWWCchdYkCja1\"}"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","keyName":"e2e-rate-b-4edc67","subscription":"e2e-rate-iso-b-4edc67","tenant":"e2e-shared-b-85f004","userId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\",\"requestedSubscription\":\"e2e-rate-iso-b-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m","name":"rate-test-model-85f004","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4edc67","namespace":"ai-tenant-e2e-shared-b-85f004","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004"}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4edc67"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","keyName":"e2e-rate-b-4edc67","selected_subscription":"e2e-rate-iso-b-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-b-85f004/e2e-rate-iso-b-4edc67@ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m","name":"rate-test-model-85f004","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4edc67","namespace":"ai-tenant-e2e-shared-b-85f004","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"}
{"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"}
{"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"}
{"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32778","PortSpecifier":{"PortValue":32778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32778","PortSpecifier":{"PortValue":32778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188435,"nanos":474053202},"http":{"id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","method":"POST","headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188435,"nanos":540857701},"http":{"id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","method":"POST","headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sRTTPgltSSMNKHHU_dVGqMDCnnQGL0hrsS7amu80GW40psS6iLMSMZZVpGm2"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sRTTPgltSSMNKHHU_dVGqMDCnnQGL0hrsS7amu80GW40psS6iLMSMZZVpGm2\"}"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"}
{"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"}
{"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"error","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"info","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49038","PortSpecifier":{"PortValue":49038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe15f78c-a267-4271-bc23-ae46591b8677","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49038","PortSpecifier":{"PortValue":49038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188491,"nanos":660635759},"http":{"id":"fe15f78c-a267-4271-bc23-ae46591b8677","method":"POST","headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b10c7cf9-db21-447b-a143-07a0b740adef","method":"POST","path":"/ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041/v1/chat/completions","host":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188493,"nanos":723444589},"http":{"id":"b10c7cf9-db21-447b-a143-07a0b740adef","method":"POST","headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XN1fRiO03ZhDNIv1_fpnoMZhmTKwG592BL70K3M8NX7bhGZoadVVSk87I7VI"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XN1fRiO03ZhDNIv1_fpnoMZhmTKwG592BL70K3M8NX7bhGZoadVVSk87I7VI\"}"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","keyName":"e2e-ipp-5d8041","subscription":"ipp-route-5d8041-sub","tenant":"e2e-ipp-a-5d8041","userId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\",\"requestedSubscription\":\"ipp-route-5d8041-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m","name":"ipp-route-5d8041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5d8041-sub","namespace":"ai-tenant-e2e-ipp-a-5d8041","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041"}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-5d8041-sub"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","keyName":"e2e-ipp-5d8041","selected_subscription":"ipp-route-5d8041-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041-sub@ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m","name":"ipp-route-5d8041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5d8041-sub","namespace":"ai-tenant-e2e-ipp-a-5d8041","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"}
{"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}