{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41776","PortSpecifier":{"PortValue":41776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3714975e-c5b4-461c-861a-00e804cbbbc3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41776","PortSpecifier":{"PortValue":41776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":603513030},"http":{"id":"3714975e-c5b4-461c-861a-00e804cbbbc3","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54770","PortSpecifier":{"PortValue":54770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54770","PortSpecifier":{"PortValue":54770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":646246221},"http":{"id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41786","PortSpecifier":{"PortValue":41786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"390fae75-5caf-4e4f-855a-2ba9566e893c","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41786","PortSpecifier":{"PortValue":41786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":686843251},"http":{"id":"390fae75-5caf-4e4f-855a-2ba9566e893c","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059119,"nanos":750905927},"http":{"id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a51eb734-56d3-415a-b580-36537d9feedb","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059120,"nanos":790674630},"http":{"id":"a51eb734-56d3-415a-b580-36537d9feedb","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a51eb734-56d3-415a-b580-36537d9feedb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51eb734-56d3-415a-b580-36537d9feedb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51eb734-56d3-415a-b580-36537d9feedb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a57e8ca5-9e5e-4616-93f5-377e54041577","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":806721652},"http":{"id":"a57e8ca5-9e5e-4616-93f5-377e54041577","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35454","PortSpecifier":{"PortValue":35454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d539900-5a75-4ec3-98ca-499f928b624b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35454","PortSpecifier":{"PortValue":35454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":845448551},"http":{"id":"0d539900-5a75-4ec3-98ca-499f928b624b","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a174243-5e80-452a-9338-5fdbd12a05bc","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":882447344},"http":{"id":"3a174243-5e80-452a-9338-5fdbd12a05bc","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50830","PortSpecifier":{"PortValue":50830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8469493a-6564-4a4e-9b60-b71012a667b8","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50830","PortSpecifier":{"PortValue":50830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059134,"nanos":956027620},"http":{"id":"8469493a-6564-4a4e-9b60-b71012a667b8","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19184d36-1812-424d-8630-7140780f2fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19184d36-1812-424d-8630-7140780f2fde","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19184d36-1812-424d-8630-7140780f2fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059136,"nanos":1050448},"http":{"id":"19184d36-1812-424d-8630-7140780f2fde","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19184d36-1812-424d-8630-7140780f2fde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19184d36-1812-424d-8630-7140780f2fde","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19184d36-1812-424d-8630-7140780f2fde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19184d36-1812-424d-8630-7140780f2fde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19184d36-1812-424d-8630-7140780f2fde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59082","PortSpecifier":{"PortValue":59082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","method":"POST","path":"/ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53/v1/completions","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59082","PortSpecifier":{"PortValue":59082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059136,"nanos":35319976},"http":{"id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GY5K3C1VRAGGwgU1_XmFs5dCHTlNxw6GHjBAUfcA0i8jAwki2kcSmmXGCVve"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GY5K3C1VRAGGwgU1_XmFs5dCHTlNxw6GHjBAUfcA0i8jAwki2kcSmmXGCVve\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","keyName":"e2e-rate-b-f71f29","subscription":"e2e-rate-iso-b-f71f29","tenant":"e2e-shared-b-356b53","userId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\",\"requestedSubscription\":\"e2e-rate-iso-b-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-356b53","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f71f29","namespace":"ai-tenant-e2e-shared-b-356b53","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","keyName":"e2e-rate-b-f71f29","selected_subscription":"e2e-rate-iso-b-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-b-356b53/e2e-rate-iso-b-f71f29@ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-356b53","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f71f29","namespace":"ai-tenant-e2e-shared-b-356b53","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"info","ts":"2026-07-14T19:59:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:59:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"info","ts":"2026-07-14T19:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}