{"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"}
{"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"}
{"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"error","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"error","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"}
{"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"}
{"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":30304109},"http":{"id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42490","PortSpecifier":{"PortValue":42490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad5a3f89-53d7-45e4-a834-669583ded28b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42490","PortSpecifier":{"PortValue":42490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":70019215},"http":{"id":"ad5a3f89-53d7-45e4-a834-669583ded28b","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eab38ab-3af7-476c-91fd-188661dae213","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":112754669},"http":{"id":"4eab38ab-3af7-476c-91fd-188661dae213","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eab38ab-3af7-476c-91fd-188661dae213","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eab38ab-3af7-476c-91fd-188661dae213","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eab38ab-3af7-476c-91fd-188661dae213","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57034","PortSpecifier":{"PortValue":57034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57034","PortSpecifier":{"PortValue":57034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564757,"nanos":176682429},"http":{"id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564758,"nanos":215799326},"http":{"id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":4274945},"http":{"id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48542d81-b057-47b3-baf6-c15ab58d1101","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":43801956},"http":{"id":"48542d81-b057-47b3-baf6-c15ab58d1101","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49816","PortSpecifier":{"PortValue":49816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2146ceee-470d-41a4-afa7-de145ac978f8","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49816","PortSpecifier":{"PortValue":49816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":84549701},"http":{"id":"2146ceee-470d-41a4-afa7-de145ac978f8","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49832","PortSpecifier":{"PortValue":49832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49832","PortSpecifier":{"PortValue":49832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564772,"nanos":125322036},"http":{"id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564773,"nanos":161689828},"http":{"id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","method":"POST","path":"/ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad/v1/completions","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564773,"nanos":196421652},"http":{"id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U66qU1dIZMQN7qmW_XzvVW3pWr0zRZ5afejJW4TVQxm50ON9PgrZQkTcnKZo"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U66qU1dIZMQN7qmW_XzvVW3pWr0zRZ5afejJW4TVQxm50ON9PgrZQkTcnKZo\"}"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31704743-56cd-42ef-952d-87d5125b94a3","keyName":"e2e-rate-b-a34034","subscription":"e2e-rate-iso-b-a34034","tenant":"e2e-shared-b-c6afad","userId":"31704743-56cd-42ef-952d-87d5125b94a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\",\"requestedSubscription\":\"e2e-rate-iso-b-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6afad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a34034","namespace":"ai-tenant-e2e-shared-b-c6afad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a34034"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"31704743-56cd-42ef-952d-87d5125b94a3","keyName":"e2e-rate-b-a34034","selected_subscription":"e2e-rate-iso-b-a34034","selected_subscription_key":"ai-tenant-e2e-shared-b-c6afad/e2e-rate-iso-b-a34034@ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6afad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a34034","namespace":"ai-tenant-e2e-shared-b-c6afad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T02:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"}
{"level":"info","ts":"2026-07-09T02:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"}
{"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"}
{"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"}
{"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"}
{"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"}
{"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"}
{"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"}
{"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"}
{"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"}
{"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"}